Cross-site Scripting Vulnerability in Björn Weinbrenner Navigation Du Lapin Blanc
CVE-2025-22745

6.5MEDIUM

Key Information:

Vendor
Björn Weinbrenner
Status
Navigation Du Lapin Blanc
Vendor
CVE Published:
15 January 2025

Summary

The Navigation Du Lapin Blanc plugin, developed by Björn Weinbrenner, is susceptible to a DOM-Based Cross-site Scripting (XSS) vulnerability. This flaw arises from improper neutralization of input during the generation of web pages, potentially allowing an attacker to inject malicious scripts. This vulnerability affects installations of Navigation Du Lapin Blanc from its initial version to 1.1.1, posing significant security risks to WordPress sites utilizing this plugin.

Affected Version(s)

Navigation Du Lapin Blanc <= 1.1.1

References

https://patchstack.com/database/wordpress/plugin/navigati...
vdb-entry

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

SOPROBRO (Patchstack Alliance)
.