CVE-2025-48113: WordPress Broadstreet plugin <= 1.51.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Broadstreet Broadstreet Ads broadstreet allows Stored XSS.This issue affects Broadstreet Ads: from n/a through <= 1.51.2.
Other sources
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Broadstreet Broadstreet allows Stored XSS. This issue affects Broadstreet: from n/a through 1.51.8.
— NVD
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-48113?
CVE-2025-48113 is classified as a high severity vulnerability due to its potential for stored cross-site scripting (XSS) attacks.
How do I fix CVE-2025-48113?
To fix CVE-2025-48113, upgrade to the latest version of Broadstreet that is beyond 1.51.8.
What types of attacks can exploit CVE-2025-48113?
CVE-2025-48113 can be exploited for stored cross-site scripting attacks that may allow attackers to inject malicious scripts.
What versions of Broadstreet are affected by CVE-2025-48113?
CVE-2025-48113 affects all versions of Broadstreet from n/a through 1.51.8.
Is user data at risk due to CVE-2025-48113?
Yes, CVE-2025-48113 poses a risk to user data as it can be exploited to execute arbitrary scripts in the context of users' sessions.