{"vulnerability": "cve-2025-5096", "sightings": [{"uuid": "21700bc6-9f47-45ca-9991-549792991b87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-5096", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lptjtufuye2s", "content": "", "creation_timestamp": "2025-05-23T11:32:23.470327Z"}, {"uuid": "1efa5c9f-c03e-4f51-9d9c-2ab1f4d9cbbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-5096", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17374", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-5096\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The TablePress plugin for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting via the 'data-caption', 'data-s-content-padding', 'data-s-title', and 'data-footer' data-attributes in all versions up to, and including, 3.1.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-05-23T08:23:39.711Z\n\ud83d\udccf Modified: 2025-05-23T08:23:39.711Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/cd2dfa02-0404-4300-a5ed-6326f9df6d30?source=cve\n2. https://plugins.trac.wordpress.org/browser/tablepress/tags/3.1.2/js/jquery.datatables.min.js\n3. https://github.com/DataTables/DataTablesSrc/blob/29539c40504365bc4be0599e4b0739cf270a2e09/js/core/core.constructor.js#L329\n4. https://wordpress.org/plugins/tablepress/#developers\n5. https://datatables.net/\n6. https://github.com/DataTables/DataTablesSrc/commit/d278ed307035cb8740d2fad86b7cbb995380f7bb\n7. https://github.com/DataTables/DataTablesSrc/commit/d558328106bef2d48dfc4cf78581dd106f5c1077\n8. https://plugins.trac.wordpress.org/changeset/3298453/tablepress\n9. https://tablepress.org/release-announcement-tablepress-3-1-3/", "creation_timestamp": "2025-05-23T08:48:25.000000Z"}]}