Cross-site Scripting Vulnerability in SQL Chart Builder by Guaven Labs
CVE-2025-58233

6.5MEDIUM

Key Information:

Vendor

WordPress
Status
Sql Chart Builder
Vendor
CVE Published:
22 September 2025

What is CVE-2025-58233?

An improper neutralization of user input during the generation of web pages in SQL Chart Builder leads to a DOM-based cross-site scripting vulnerability. This flaw allows attackers to inject malicious scripts into web pages viewed by users of the affected version, creating a potential risk for data theft and unauthorized actions. The vulnerability affects versions from n/a to 2.3.7.2 of the SQL Chart Builder product by Guaven Labs.

Affected Version(s)

SQL Chart Builder <= 2.3.7.2

References

https://patchstack.com/database/wordpress/plugin/sql-char...
vdb-entry

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Muhammad Yudha - DJ (Patchstack Alliance)
JSON
.