Upcasted S3 Offload – AWS S3, Digital Ocean Spaces, Backblaze, Minio and more, CVE-2025-22676

CVE, Research URL: CVE-2025-22676
Home page URL: Security reports for Upcasted S3 Offload – AWS S3, Digital Ocean Spaces, Backblaze, Minio and more
Application: Upcasted S3 Offload – AWS S3, Digital Ocean Spaces, Backblaze, Minio and more
Published on: Feb 17, 2025
Research Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in upcasted AWS S3 for WordPress Plugin – Upcasted upcasted-s3-offload allows Stored XSS.This issue affects AWS S3 for WordPress Plugin – Upcasted: from n/a through <= 3.0.3.
Affected versions: max 3.0.4.
Status: vulnerable

Upcasted S3 Offload &#8211; AWS S3, Digital Ocean Spaces, Backblaze, Minio and more, CVE-2025-22676