WPGov/amministrazione-trasparente

WPGov/amministrazione-trasparente

Releases20

Frequency2 months 2 weeks

Last Release 10 months ago

Stars8

Plugin WordPress per la gestione documentale di Amministrazione Trasparente - D.Lgs 33/2013

Log in to subscribe

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2025-5083 ↗	Aug 31, 2025Sunday, 31 August 2025, 05:15	5.5 MEDIUM	—
The Amministrazione Trasparente plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 9.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.