Medium severity5.9OSV Advisory· Published May 27, 2025· Updated Jun 17, 2026

CVE-2025-3704

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DBAR Productions Volunteer Sign Up Sheets pta-volunteer-sign-up-sheets allows Stored XSS.This issue affects Volunteer Sign Up Sheets: from n/a through < 5.5.5.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Dbarproductions/Pta Volunteer Sign Up SheetsOSV2 versions
5.0.0, 5.1.0, 5.1.1, …+ 1 more
- (no CPE)range: 5.0.0, 5.1.0, 5.1.1, …
- (no CPE)range: < 5.5.5
WordPress/Volunteer Sign Up Sheetsllm-create
Range: < 5.5.5

Patches

Vulnerability mechanics

References

patchstack.com/database/Wordpress/Plugin/pta-volunteer-sign-up-sheets/vulnerability/wordpress-volunteer-sign-up-sheets-plugin-5-5-5-cross-site-scripting-xss-vulnerabilitynvd

News mentions

No linked articles in our index yet.

cvss	0.384
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000