Reflected XSS Vulnerability in CodeBard Help Desk Plugin by CodeBard
CVE-2025-22760

7.1HIGH

Key Information:

Vendor
WordPress
Status
Codebard Help Desk
Vendor
CVE Published:
15 January 2025

Summary

The CodeBard Help Desk plugin is susceptible to a reflected Cross-site Scripting (XSS) vulnerability. This issue arises from improper neutralization of user input during web page generation, allowing attackers to execute arbitrary JavaScript within the context of the user's browser. If exploited, this vulnerability can lead to unauthorized access to sensitive information or manipulation of the site’s content, potentially jeopardizing user security and data integrity.

Affected Version(s)

CodeBard Help Desk <= 1.1.2

References

https://patchstack.com/database/wordpress/plugin/codebard...
vdb-entry

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

hunter85 (Patchstack Alliance)
.