Medium severity6.1NVD Advisory· Published Dec 5, 2025· Updated Apr 15, 2026
CVE-2025-13622
CVE-2025-13622
Description
The Jabbernotification plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the admin.php PATH_INFO in all versions up to, and including, 0.99-RC2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4- plugins.trac.wordpress.org/browser/jabberbenachrichtigung/tags/0.99-RC2/jabbernotification.phpnvd
- plugins.trac.wordpress.org/browser/jabberbenachrichtigung/trunk/jabbernotification.phpnvd
- wordpress.org/plugins/jabberbenachrichtigung/nvd
- www.wordfence.com/threat-intel/vulnerabilities/id/8e9a872d-575c-455c-8f26-709878817ae0nvd
News mentions
0No linked articles in our index yet.