Cross-site Scripting Vulnerability in SKT Blocks by Sonal Sinha
CVE-2025-48270

5.4MEDIUM

Key Information:

Vendor

WordPress
Status
Skt Blocks
Vendor
CVE Published:
19 May 2025

What is CVE-2025-48270?

A Cross-site Scripting (XSS) vulnerability exists in SKT Blocks by Sonal Sinha, allowing for potential malicious exploitation through improper neutralization of user inputs during web page generation. This affects versions of SKT Blocks from n/a to 2.2, posing a risk for users relying on the plugin for their WordPress sites. Addressing this issue is crucial to safeguard user data and maintain the integrity of web applications.

Affected Version(s)

SKT Blocks <= 2.2

References

https://patchstack.com/database/wordpress/plugin/skt-bloc...
vdb-entry

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

zaim (Patchstack Alliance)
JSON
.