Cross-Site Scripting Vulnerability in Infility Global by Infility
CVE-2025-47652

7.1HIGH

Key Information:

Vendor

WordPress
Status
Infility Global
Vendor
CVE Published:
16 July 2025

What is CVE-2025-47652?

A Cross-Site Scripting (XSS) vulnerability exists in Infility Global, allowing attackers to execute arbitrary scripts in the context of a user's session. This flaw can potentially lead to session hijacking, data theft, and other malicious actions. It affects all versions from n/a through 2.13.4, thereby exposing users to various security risks if not properly mitigated. Users are advised to implement security measures to prevent exploitation.

Affected Version(s)

Infility Global <= 2.13.4

References

https://patchstack.com/database/wordpress/plugin/infility...
vdb-entry

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Martino Spagnuolo (r3verii) (Patchstack Alliance)
.
CVE-2025-47652 : Cross-Site Scripting Vulnerability in Infility Global by Infility