nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2019-25743 CVE-2019-25743
MEDIUM
WordPress Soliloquy Lite 2.5.6 Persistent Cross-Site Scripting
Record summary
CVE-2019-25743 has a selected CVSS score of 5.1 (medium); EIP currently links 1 catalogued exploit.
Description
WordPress Soliloquy Lite 2.5.6 contains a persistent cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by inserting script tags in the post title field. Attackers can submit POST requests to the post editing endpoint with script payloads in the post_title parameter, which are stored and executed when users preview the post.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
CISA SSVC decision
ExploitationPoC
AutomatableNo
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Jun 4, 2026 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
Soliloquy LiteBrowse Soliloquywp / Soliloquy Lite | CVE List | 2.5.6 | affected |
Proofs of concept
1Catalogued exploits
ExploitDBWordPress Plugin Soliloquy Lite 2.5.6 - Persistent Cross-Site ScriptingExploitDB exploitby Unk9vvNNot analyzed1 file
References
5Official Product Homepageproduct
https://soliloquywp.com/ Product Referenceproduct
https://wordpress.org/plugins/soliloquy-lite ExploitDB-47517exploit
https://www.exploit-db.com/exploits/47517 VulnCheck Advisory: WordPress Soliloquy Lite 2.5.6 Persistent Cross-Site ScriptingThird-party advisory
https://www.vulncheck.com/advisories/wordpress-soliloquy-lite-persistent-cross-site-scripting