CVE-2025-47598: WordPress History Log by click5 plugin <= 1.0.13 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in click5 History Log by click5 allows Stored XSS. This issue affects History Log by click5: from n/a through 1.0.13.
Other sources
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in click5 History Log by click5 history-log-by-click5 allows Stored XSS.This issue affects History Log by click5: from n/a through <= 1.0.13.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-47598?
The severity of CVE-2025-47598 is classified as medium with a score of 6.5 according to the CVSS 3.1 metrics.
How do I fix CVE-2025-47598?
To fix CVE-2025-47598, update the History Log by click5 plugin to version 1.0.14 or later.
What types of vulnerabilities are associated with CVE-2025-47598?
CVE-2025-47598 is associated with Cross Site Scripting (XSS) vulnerabilities due to improper input normalization.
What is affected by CVE-2025-47598?
CVE-2025-47598 affects the History Log by click5 plugin versions from n/a through 1.0.13.
What impact does CVE-2025-47598 have on users?
CVE-2025-47598 allows for Stored XSS attacks, which can compromise user data and lead to unauthorized actions on the platform.