CVE-2025-60176

Published: 10/22/2025 15:15:57
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tattersoftware WP Tesseract wp-tesseract allows Stored XSS.This issue affects WP Tesseract: from n/a through <= 1.0.2.
MEDIUM
CVSS v3: 5.9

Status

DocFilters Release Package State Justification Comment
0.0.0.1 tesseract (3.02.02) Not Affected Code Not Present Document Filter does not use the Tesseract WordPress plugin
25.4 tesseract (3.02.02) Not Affected Code Not Present Document Filter does not use the Tesseract WordPress plugin
25.3 tesseract (3.02.02) Not Affected Code Not Present Document Filter does not use the Tesseract WordPress plugin
25.2 tesseract (3.02.02) Not Affected Code Not Present Document Filter does not use the Tesseract WordPress plugin
25.1.1 tesseract (3.02.02) Not Affected Code Not Present Document Filter does not use the Tesseract WordPress plugin
25.1 tesseract (3.02.02) Not Affected Code Not Present Document Filter does not use the Tesseract WordPress plugin
24.4 tesseract (3.02.02) Not Affected Code Not Present Document Filter does not use the Tesseract WordPress plugin
24.4.0 tesseract (3.02.02) Not Affected Code Not Present Document Filter does not use the Tesseract WordPress plugin
24.3 tesseract (3.02.02) Not Affected Code Not Present Document Filter does not use the Tesseract WordPress plugin
24.2.1 tesseract (3.02.02) Not Affected Code Not Present Document Filter does not use the Tesseract WordPress plugin
24.2 tesseract (3.02.02) Not Affected Code Not Present Document Filter does not use the Tesseract WordPress plugin
24.1 tesseract (3.02.02) Not Affected Code Not Present Document Filter does not use the Tesseract WordPress plugin
23.3 tesseract (3.02.02) Not Affected Code Not Present Document Filter does not use the Tesseract WordPress plugin
23.2.1 tesseract (3.02.02) Not Affected Code Not Present Document Filter does not use the Tesseract WordPress plugin
23.2 tesseract (3.02.02) Not Affected Code Not Present Document Filter does not use the Tesseract WordPress plugin
23.1 tesseract (3.02.02) Not Affected Code Not Present Document Filter does not use the Tesseract WordPress plugin
22.4 tesseract (3.02.02) Not Affected Code Not Present Document Filter does not use the Tesseract WordPress plugin
22.3 tesseract (3.02.02) Not Affected Code Not Present Document Filter does not use the Tesseract WordPress plugin
22.2 tesseract (3.02.02) Not Affected Code Not Present Document Filter does not use the Tesseract WordPress plugin
22.1 tesseract (3.02.02) Not Affected Code Not Present Document Filter does not use the Tesseract WordPress plugin
21.11.1 tesseract (3.02.02) Not Affected Code Not Present Document Filter does not use the Tesseract WordPress plugin
21.11 tesseract (3.02.02) Not Affected Code Not Present Document Filter does not use the Tesseract WordPress plugin
21.8.1 tesseract (3.02.02) Not Affected Code Not Present Document Filter does not use the Tesseract WordPress plugin
21.8 tesseract (3.02.02) Not Affected Code Not Present Document Filter does not use the Tesseract WordPress plugin
21.5.1 tesseract (3.02.02) Not Affected Code Not Present Document Filter does not use the Tesseract WordPress plugin
21.5.0 tesseract (3.02.02) Not Affected Code Not Present Document Filter does not use the Tesseract WordPress plugin
21.2.0 tesseract (3.02.02) Not Affected Code Not Present Document Filter does not use the Tesseract WordPress plugin
11.4.20 tesseract (3.02.02) Not Affected Code Not Present Document Filter does not use the Tesseract WordPress plugin
11.4.19.3667 tesseract (3.02.02) Not Affected Code Not Present Document Filter does not use the Tesseract WordPress plugin
11.4.18.3599 tesseract (3.02.02) Not Affected Code Not Present Document Filter does not use the Tesseract WordPress plugin
11.4.17 tesseract (3.02.02) Not Affected Code Not Present Document Filter does not use the Tesseract WordPress plugin
11.4.16.3445 tesseract (3.02.02) Not Affected Code Not Present Document Filter does not use the Tesseract WordPress plugin
11.4.15.3368 tesseract (3.02.02) Not Affected Code Not Present Document Filter does not use the Tesseract WordPress plugin
11.4.14.3263 tesseract (3.02.02) Not Affected Code Not Present Document Filter does not use the Tesseract WordPress plugin
11.4.13.3179 tesseract (3.02.02) Not Affected Code Not Present Document Filter does not use the Tesseract WordPress plugin
11.4.12.3054 tesseract (3.02.02) Not Affected Code Not Present Document Filter does not use the Tesseract WordPress plugin
11.4.11.3040 tesseract (3.02.02) Not Affected Code Not Present Document Filter does not use the Tesseract WordPress plugin
11.4.11.2990 tesseract (3.02.02) Not Affected Code Not Present Document Filter does not use the Tesseract WordPress plugin
11.4.10.2934 tesseract (3.02.02) Not Affected Code Not Present Document Filter does not use the Tesseract WordPress plugin
11.4.9.2878 tesseract (3.02.02) Not Affected Code Not Present Document Filter does not use the Tesseract WordPress plugin
11.4.8.2822 tesseract (3.02.02) Not Affected Code Not Present Document Filter does not use the Tesseract WordPress plugin

Severity score breakdown

Attack Complexity
LOW
Attack Vector
NETWORK
Availability Impact
LOW
Base Score
5.9
Base Severity
MEDIUM
Confidentiality Impact
LOW
Integrity Impact
LOW
Privileges Required
HIGH
Scope
CHANGED
User Interaction
REQUIRED
Vector String
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L
Version
3.1

References