Stored XSS Vulnerability in History Log Plugin by Click5
CVE-2025-47598

6.5MEDIUM

Key Information:

Vendor

WordPress
Status
History Log By Click5
Vendor
CVE Published:
9 June 2025

What is CVE-2025-47598?

A Stored Cross-site Scripting (XSS) vulnerability exists in the History Log plugin by Click5, which allows attackers to inject malicious scripts into user data. This issue can be exploited to execute arbitrary scripts within the context of a user's browser, posing significant security risks. The vulnerability affects versions from n/a to 1.0.13, making it crucial for users to update their plugins to safeguard against potential exploitation.

Affected Version(s)

History Log by click5 <= 1.0.13

References

https://patchstack.com/database/wordpress/plugin/history-...
vdb-entry

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

SashaRyba (Patchstack Alliance)
.