Cross-site Scripting Vulnerability in Append Link on Copy by JonathanMH
CVE-2025-57941

5.9MEDIUM

Key Information:

Vendor

WordPress
Status
Append Link On Copy
Vendor
CVE Published:
22 September 2025

What is CVE-2025-57941?

The Append Link on Copy plugin for WordPress is vulnerable to stored cross-site scripting due to improper input sanitization during web page generation. This vulnerability permits an attacker to inject malicious scripts into web pages viewed by other users, potentially compromising user data and site integrity. The issue affects versions prior to 0.2. It is essential for website administrators to update the plugin to the latest version to mitigate the risk.

Affected Version(s)

Append Link on Copy <= 0.2

References

https://patchstack.com/database/wordpress/plugin/append-l...
vdb-entry

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Nabil Irawan (Patchstack Alliance)
JSON
.