CVE-2025-4652

MEDIUMNuclei

Broadstreet < 1.51.8 - Reflected XSS

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2025-4652 has a selected CVSS score of 6.1 (medium); EIP currently links 1 Nuclei template.

Description

The Broadstreet WordPress plugin before 1.51.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

CISA SSVC decision

ExploitationPoC
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Jun 10, 2025 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

Broadstreet

Default status: unaffected

CVE ListBefore 1.51.8affected

Nuclei templates

1
ProjectDiscoveryMEDIUMBroadstreet WordPress plugin - Reflected XSSCVSS 6.1

Broadstreet WordPress plugin < 1.51.8 contains a reflected XSS caused by unsanitised and unescaped parameter output, letting attackers execute scripts against high privilege users such as admin, exploit requires victim interaction.

Impact

Attackers can execute scripts in admin users' browsers, potentially leading to session hijacking or privilege abuse.

Remediation

Update to version 1.51.8 or later.

WeaknessesCWE-79
AuthorsSourabh-Sahu
Template tagscvecve2025broadstreetadsbroadstreetauthenticatedwordpresswpwp-pluginxss
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CPE: cpe:2.3:a:broadstreetads:broadstreet:*:*:*:*:*:wordpress:*:*
https://wpscan.com/vulnerability/2a18ab96-ba95-4599-824f-df12e4851e6d/

Source: ProjectDiscovery

References

2