Stored Cross-Site Scripting in Apollo13 Framework Extensions by WordPress

CVE-2025-13617

What is CVE-2025-13617?

The Apollo13 Framework Extensions plugin for WordPress contains a vulnerability that allows authenticated users with Contributor-level access and above to execute malicious scripts. This vulnerability arises from inadequate input sanitization and output escaping in the ‘a13_alt_link’ parameter, enabling attackers to inject arbitrary web scripts into pages, consequently affecting all visitors who access the compromised pages. Immediate action should be taken to mitigate risks associated with this security flaw.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References