WordSec
WordSec

Smartarget – Get 40% more sales, improve user engagement with 25+ free apps. <= 1.5.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting

2025-02-03 00:00
hunter85

Strategic Overview

Status
Patched in 1.5.3
Affected PluginSmartarget – Chat Buttons & Engagement Apps
Affected Version<= 1.5.2
CVSS6.4Medium
CVECVE-2025-22650
View all Smartarget – Chat Buttons & Engagement Apps vulnerabilities

Vulnerability Overview

The Smartarget – Get 40% more sales, improve user engagement with 25+ free apps. plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.5.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

Technical Analysis

REMEDIATION: Update to version 1.5.3, or a newer patched version --- IDENTIFIER: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')) The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

External References

https://www.cve.org/CVERecord?id=CVE-2025-22650https://www.wordfence.com/threat-intel/vulnerabilities/id/7a30452a-9d7e-4312-87eb-56d9d1aeced3

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C

Smartarget – Get 40% more sales, improve user engagement with 25+ free apps. <= 1.5.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting (CVE-2025-22650)