The Smart Maintenance Mode WordPress plugin before 1.5.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when th…
CVSS 3.1MEDIUM 6.1·Network·No auth·User interaction·EPSS 0.00279·Published 2025-03-25·Fixed in 1.5.2CWE-79
The Smart Maintenance Mode WordPress plugin before 1.5.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when th…
CVSS 3.1LOW 3.5·Network·High privileges·User interaction·EPSS 0.00287·Published 2025-03-26·Fixed in 1.5.2CWE-79