Stored Cross-Site Scripting Vulnerability in Valuation Calculator Plugin for WordPress

CVE-2025-5753

What is CVE-2025-5753?

The Valuation Calculator plugin for WordPress is vulnerable to Stored Cross-Site Scripting due to inadequate input validation and output escaping. This vulnerability affects all versions up to and including 1.3.2. Authenticated users with Contributor-level access or higher can exploit this weakness by injecting arbitrary web scripts through the ‘link’ parameter. This malicious content executes whenever a user accesses an affected page, impacting the integrity and security of the site.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References