CVE-2025-13073

HIGH EPSS 4.1%

Published Dec 10, 20256mo ago · Modified Jun 17, 20261w ago

7.1 CVSS 3.1

High

Published Dec 10, 2025 6mo ago

Last Modified Jun 17, 2026 1w ago

Description

The HandL UTM Grabber / Tracker WordPress plugin before 2.8.1 does not sanitize and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin

CVSS Details

Base Score

7.1

Exploitability

2.8

Impact

3.7

Vector string

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Attack Vector Network

Attack Complexity Low

Privileges Required None

User Interaction Required

Scope Changed

Confidentiality Low

Integrity Low

Availability Low

Threat Intelligence

EPSS Exploit Probability

4.1% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

References 1

wpscan.com https://wpscan.com/vulnerability/697fc4be-782c-44cc-840a-774c8ab3ccd8/

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.