PT-2026-21037 · Storyform · Storyform

CVE-2025-53233 · Publicado 2026-02-20 · Atualizado 2026-02-25

Positive Technologies (AI Summary)

CVSS v3.1

7.1

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions RylanH Storyform versions through 0.6.14

Description The software contains a flaw due to improper neutralization of input during web page generation, specifically a Reflected Cross-site Scripting issue. This allows for the execution of malicious scripts through crafted input. The affected component is Storyform.

Recommendations Versions prior to 0.6.14 should be updated.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2025-53233

Produtos afetados

Storyform

Referências · 4

• https://patchstack.com/database/Wordpress/Plugin/storyform/vulnerability/wordpress-storyform-plugin-0-6-14-cross-site-scripting-xss-vulnerability?_s_id=cve · Nota
• https://twitter.com/cracbot/status/2026613221952729290 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-53233 · Nota de Segurança
• https://twitter.com/CVEnew/status/2025524078132572548 · Publicação no Twitter