Stored Cross-Site Scripting Vulnerability in Amministrazione Trasparente Plugin for WordPress

CVE-2025-5083

What is CVE-2025-5083?

The Amministrazione Trasparente plugin for WordPress is susceptible to a Stored Cross-Site Scripting vulnerability due to inadequate input sanitization and output escaping in the admin settings. This issue affects all versions up to and including 9.0. Authenticated attackers with administrator-level permissions can exploit this vulnerability to inject and execute arbitrary web scripts on pages when accessed by users. Notably, the risk is heightened in multi-site deployments and configurations where unfiltered_html has been disabled.

References