Cross-site Scripting Vulnerability in Mollie Forms by Nick Mollie
CVE-2025-47502

6.5MEDIUM

Key Information:

Vendor

WordPress
Status
Mollie Forms
Vendor
CVE Published:
7 May 2025
đź”” Create WordPress Vulnerability Alert

What is CVE-2025-47502?

Mollie Forms, developed by Nick Mollie, is susceptible to a Cross-site Scripting vulnerability that allows for stored XSS attacks. This arises from the improper neutralization of input during web page generation. Attackers may exploit this vulnerability to inject malicious scripts into web pages, potentially compromising user data and enabling unauthorized actions on behalf of users. The vulnerability affects all versions from n/a up to 2.7.12, underscoring the importance of prompt updates and secure coding practices to mitigate such risks.

Affected Version(s)

Mollie Forms <= 2.7.12

References

https://patchstack.com/database/wordpress/plugin/mollie-f...
vdb-entry

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

muhammad yudha (Patchstack Alliance)
.