Cross-Site Scripting Vulnerability in Omnipress by Omnipressteam
CVE-2025-53276

6.5MEDIUM

Key Information:

Vendor

WordPress
Status
Omnipress
Vendor
CVE Published:
27 June 2025

What is CVE-2025-53276?

The Cross-Site Scripting (XSS) vulnerability in Omnipress allows attackers to inject malicious scripts into web applications, affecting users by executing unintended scripts in their browsers. This issue arises from improper input validation during web page generation, specifically allowing DOM-Based XSS attacks. Versions affected include Omnipress up to 1.6.3, which compromises the integrity of user interactions and data security.

Affected Version(s)

Omnipress <= 1.6.3

References

https://patchstack.com/database/wordpress/plugin/omnipres...
vdb-entry

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Khalid Yusuf (Patchstack Alliance)
.
CVE-2025-53276 : Cross-Site Scripting Vulnerability in Omnipress by Omnipressteam