Reflected Cross-Site Scripting in Jabbernotification Plugin for WordPress

CVE-2025-13622

What is CVE-2025-13622?

The Jabbernotification plugin for WordPress has a vulnerability that allows for Reflected Cross-Site Scripting due to inadequate input sanitization and output escaping. Attackers can exploit this flaw by tricking users into clicking malicious links, leading to the injection of arbitrary web scripts. All versions up to and including 0.99-RC2 are affected, making it crucial for website administrators to implement appropriate security measures to mitigate potential exploitation.

References