Cross-Site Scripting Vulnerability in Progress Bar by Chris Reynolds
CVE-2025-47441

6.5MEDIUM

Key Information:

Vendor

WordPress
Status
Progress Bar
Vendor
CVE Published:
7 May 2025

What is CVE-2025-47441?

A vulnerability in the Progress Bar plugin by Chris Reynolds allows attackers to exploit improper input neutralization during web page generation, leading to Stored Cross-Site Scripting (XSS) issues. This can result in malicious scripts being injected and executed in the user's browser, compromising the security of the website and its users. Affected versions are 2.2.3 and earlier.

Affected Version(s)

Progress Bar <= 2.2.3

References

https://patchstack.com/database/wordpress/plugin/progress...
vdb-entry

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

muhammad yudha (Patchstack Alliance)
.