{"id":9557,"date":"2025-08-02T03:43:28","date_gmt":"2025-08-02T03:43:28","guid":{"rendered":"http:\/\/localhost\/?p=9557"},"modified":"2025-08-02T03:43:28","modified_gmt":"2025-08-02T03:43:28","slug":"shortpixel-adaptive-images-webp-avif-cdn-image-optimization-3104-authenticated-administrator-stored","status":"publish","type":"post","link":"https:\/\/zero.redgem.net\/?p=9557","title":{"rendered":"ShortPixel Adaptive Images \u2013 WebP, AVIF, CDN, Image Optimization <= 3.10.4 - Authenticated (Administrator+) Stored Cross-Site Scripting via API URL"},"content":{"rendered":"
\n

CVE Details<\/h2>\n
\n
\n

Basic Information<\/h3>\n\n\n\n\n\n
Title<\/th>\nShortPixel Adaptive Images \u2013 WebP, AVIF, CDN, Image Optimization <= 3.10.4 - Authenticated (Administrator+) Stored Cross-Site Scripting via API URL<\/td>\n<\/tr>\n
Type<\/th>\ncve<\/td>\n<\/tr>\n
Published<\/th>\n2025-08-02T07:24:21.083Z<\/td>\n<\/tr>\n
Modified<\/th>\n2025-08-02T07:24:21.083Z<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

Product Information<\/h3>\n\n\n\n\n
Vendor<\/th>\nshortpixel<\/td>\n<\/tr>\n
Product<\/th>\nShortPixel Adaptive Images \u2013 WebP, AVIF, CDN, Image Optimization<\/td>\n<\/tr>\n
Version<\/th>\n*<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
\n

CVSS Information<\/h3>\n\n\n\n
Base Score<\/th>\n4.4 (MEDIUM)<\/td>\n<\/tr>\n
Attack Vector<\/th>\nCVSS:3.1\/AV:N\/AC:H\/PR:H\/UI:N\/S:C\/C:L\/I:L\/A:N<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

AI Analysis<\/h3>\n\n\n\n\n\n\n
AI Description<\/th>\nThe ShortPixel Adaptive Images WordPress plugin is vulnerable to Stored Cross-Site Scripting (XSS) due to insufficient input sanitization in the API URL setting. This allows authenticated administrators to inject malicious scripts, which execute when users access affected pages. The issue affects versions up to 3.10.3 and is particularly relevant in multi-site installations or where unfiltered_html is disabled.<\/td>\n<\/tr>\n
AI Severity<\/th>\nMedium<\/td>\n<\/tr>\n
AI Vendor<\/th>\nWordPress Community<\/td>\n<\/tr>\n
AI Product<\/th>\nShortPixel Adaptive Images \u2013 WebP, AVIF, CDN, Image Optimization<\/td>\n<\/tr>\n
AI Version<\/th>\n3.10.3<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

Affected Products<\/h4>\n