PT-2026-4090 · Unknown · Infility Global

CVE-2025-68864 · Publicado 2026-01-22 · Atualizado 2026-01-23

Positive Technologies (AI Summary)

CVSS v3.1

7.1

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Infility Global versions through 2.14.50

Description The software contains a flaw due to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting (XSS). This means that malicious scripts can be stored on the target server and executed by users visiting the affected web pages. The vulnerability exists in Infility Global.

Recommendations Update Infility Global to a version later than 2.14.50.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2025-68864

Produtos afetados

Infility Global

Referências · 3

• https://patchstack.com/database/Wordpress/Plugin/infility-global/vulnerability/wordpress-infility-global-plugin-2-14-49-cross-site-scripting-xss-vulnerability?_s_id=cve · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-68864 · Nota de Segurança
• https://twitter.com/CVEnew/status/2014706996637835472 · Publicação no Twitter