Stored Cross-Site Scripting Vulnerability in Amministrazione Trasparente Plugin for WordPress

CVE-2025-5083

What is CVE-2025-5083?

The Amministrazione Trasparente plugin for WordPress is susceptible to a Stored Cross-Site Scripting vulnerability due to inadequate input sanitization and output escaping in the admin settings. This issue affects all versions up to and including 9.0. Authenticated attackers with administrator-level permissions can exploit this vulnerability to inject and execute arbitrary web scripts on pages when accessed by users. Notably, the risk is heightened in multi-site deployments and configurations where unfiltered_html has been disabled.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References