PT-2025-4576 · Unknown · Scanventory

Le Ngoc Anh · Published 2025-01-13 · Updated 2025-01-13 · CVE-2025-22588

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

The vulnerable software is Scanventory, specifically versions from n/a to 1.1.3. The vulnerability is an Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting (XSS), which allows Reflected XSS attacks. This vulnerability is identified by the CVE-2025-22588 code. There is no information provided about a public exploit for this vulnerability or whether it has been exploited by attackers. The vulnerability can be exploited by sending malicious input to the web page generation process, which can lead to the execution of arbitrary code on the victim's browser. No information is available about the number of Internet users that can be affected by the exploitation of this vulnerability. CVE-2025-22588 #Scanventory #XSS #CrossSiteScripting #ReflectedXSS #ImproperNeutralization #InputValidation #WebPageGeneration #ScanventoryVulnerability #CVE202522588

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-22588

Affected Products

Scanventory

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-22588 · Security Note
• https://twitter.com/CVEnew/status/1878799449834553526 · Twitter Post
• https://t.me/cvedetector/15140 · Telegram Post
• https://patchstack.com/database/wordpress/plugin/woocommerce-inventory-management/vulnerability/wordpress-scanventory-plugin-1-1-3-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve · Note
• https://twitter.com/VulmonFeeds/status/1878855130813972639 · Twitter Post
• https://patchstack.com/database/Wordpress/Plugin/woocommerce-inventory-management/vulnerability/wordpress-scanventory-plugin-1-1-3-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve · Note