Vulnerabilities and Security Researches

Injection Guard, CVE-2025-8046

CVE, Research URL: CVE-2025-8046
Home page URL: Security reports for Injection Guard
Application: Injection Guard
Published on: Aug 14, 2025
Research Description: The Injection Guard WordPress plugin before 1.2.8 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers
Affected versions: Min -, max 1.2.8.
Status: vulnerable