WordPress Plugin Vulnerabilities

Broadstreet < 1.52.2 - Subscriber+ Stored XSS

Description

The plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

Affects Plugins

Plugin icon
broadstreet
Fixed in 1.52.2

References

CVE
CVE-2025-32211
URL
https://patchstack.com/database/wordpress/plugin/broadstreet/vulnerability/wordpress-broadstreet-plugin-1-51-1-cross-site-scripting-xss-vulnerability

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79
CVSS
8.8 (high)

Miscellaneous

Original Researcher
Kévin Mosbahi (Mika)
Verified
No
WPVDB ID
85be1e69-5d40-4bee-9533-1bf6223a4dc4

Timeline

Publicly Published
2025-04-07 (about 1 year ago)
Added
2025-04-15 (about 1 year ago)
Last Updated
2026-02-23 (about 6 months ago)

Other

Published
Title
Published
2026-07-28
Title
WowStore < 4.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'currentPostId' Block Attribute
Published
2024-12-17
Title
AdWork Media EZ Content Locker <= 3.0 - Reflected Cross-Site Scripting
Published
2025-06-12
Title
If-So Dynamic Content Personalization < 1.9.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2026-07-22
Title
WP Shortcode by MyThemeShop <= 1.4.17 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title' Shortcode Attribute
Published
2025-05-16
Title
Uncanny Toolkit for LearnDash < 3.7.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting