What is CVE-2025-1232?

CVE-2025-1232 is a high-severity vulnerability in Geminilabs Site Reviews, classified under Cross-site Scripting. CVSS score: 8.8/10. Published 2025-03-19.

How severe is CVE-2025-1232?

High severity. CVSS v3 base score is 8.8 out of 10.

XSS in Geminilabs Site Reviews

CVE-2025-1232

The Site Reviews WordPress plugin before 7.2.5 does not properly sanitise and escape some of its Review fields, which could allow unauthenticated users to perform Stored XSS attacks

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.019 (77.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

Affected products

Geminilabs Site_reviews
Unknown Site Reviews — versions 0

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

contact@wpscan.com (Exploit, technical-description, Third Party Advisory, exploit, vdb-entry)

Frequently asked questions

What is CVE-2025-1232?: CVE-2025-1232 is a high-severity vulnerability in Geminilabs Site Reviews, classified under Cross-site Scripting. CVSS score: 8.8/10. Published 2025-03-19.
How severe is CVE-2025-1232?: High severity. CVSS v3 base score is 8.8 out of 10.