CVE-2026-125452: WordPress WPJAM Basic plugin <= 7.1.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Denishua WPJAM Basic wpjam-basic allows Reflected XSS.This issue affects WPJAM Basic: from n/a through 7.1.2.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
wpjam-basicto a version that resolves this vulnerability.Fixed in 7.1.4
Event History
Frequently Asked Questions
Which installations are affected?
WPJAM Basic versions through 7.1.2 are affected. The available data does not identify a fixed version or indicate whether any particular configuration is excluded.
What does exploitation require?
The vector is network-accessible and requires no attacker privileges or complex attack conditions, but it does require user interaction. The issue is a reflected XSS vulnerability, so exploitation generally depends on a user loading attacker-influenced content.
What is the potential impact?
Successful exploitation may affect confidentiality, integrity, and availability at low impact levels. The CVSS vector also indicates scope can change, meaning impact may extend beyond the vulnerable component's security authority.