PT-2025-38879 · Webvitaly · Page-List+1

Zaim · Published 2025-09-22 · Updated 2025-09-22 · CVE-2025-58030

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions webvitaly Page-list versions through 5.7

Description A flaw exists in webvitaly Page-list that allows for Stored Cross-site Scripting (XSS). This occurs due to improper neutralization of input during web page generation. The issue allows an attacker to inject malicious scripts into web pages viewed by other users.

Recommendations Update webvitaly Page-list to a version later than 5.7.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-58030

Affected Products

Page-List

Webvitaly Page-List

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-58030 · Security Note
• https://twitter.com/CVEnew/status/1970255704385822776 · Twitter Post
• https://patchstack.com/database/wordpress/plugin/page-list/vulnerability/wordpress-page-list-plugin-5-7-cross-site-scripting-xss-vulnerability?_s_id=cve · Note
• https://patchstack.com/database/Wordpress/Plugin/page-list/vulnerability/wordpress-page-list-plugin-5-7-cross-site-scripting-xss-vulnerability?_s_id=cve · Note