CVE-2025-22733: WordPress My auctions allegro Plugin <= 3.6.18 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wphocus My auctions allegro my-auctions-allegro-free-edition allows Reflected XSS.This issue affects My auctions allegro: from n/a through <= 3.6.18.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-22733?
CVE-2025-22733 is considered a medium severity vulnerability due to its reflected cross-site scripting (XSS) attack vector.
How do I fix CVE-2025-22733?
To fix CVE-2025-22733, update the WPHocus My auctions allegro plugin to version 3.6.19 or later.
What versions are affected by CVE-2025-22733?
CVE-2025-22733 affects all versions of WPHocus My auctions allegro from n/a up to and including 3.6.18.
What impact does CVE-2025-22733 have?
The impact of CVE-2025-22733 includes the potential for attackers to execute arbitrary scripts in the browser of users who visit a compromised page.
Is CVE-2025-22733 a common vulnerability in web applications?
Yes, CVE-2025-22733 exemplifies a common type of vulnerability in web applications known as reflected cross-site scripting (XSS).