{"id":9560,"date":"2025-08-02T04:44:46","date_gmt":"2025-08-02T04:44:46","guid":{"rendered":"http:\/\/localhost\/?p=9560"},"modified":"2025-08-02T04:44:46","modified_gmt":"2025-08-02T04:44:46","slug":"mmm-unity-loader-10-authenticated-contributor-stored-cross-site-scripting-via-attributes-parameter","status":"publish","type":"post","link":"https:\/\/zero.redgem.net\/?p=9560","title":{"rendered":"Mmm Unity Loader <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via attributes Parameter"},"content":{"rendered":"
\n

CVE Details<\/h2>\n
\n
\n

Basic Information<\/h3>\n\n\n\n\n\n
Title<\/th>\nMmm Unity Loader <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via attributes Parameter<\/td>\n<\/tr>\n
Type<\/th>\ncve<\/td>\n<\/tr>\n
Published<\/th>\n2025-08-02T08:24:46.584Z<\/td>\n<\/tr>\n
Modified<\/th>\n2025-08-02T08:24:46.584Z<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

Product Information<\/h3>\n\n\n\n\n
Vendor<\/th>\nmmanifesto<\/td>\n<\/tr>\n
Product<\/th>\nMmm Unity Loader<\/td>\n<\/tr>\n
Version<\/th>\n*<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
\n

CVSS Information<\/h3>\n\n\n\n
Base Score<\/th>\n6.4 (MEDIUM)<\/td>\n<\/tr>\n
Attack Vector<\/th>\nCVSS:3.1\/AV:N\/AC:L\/PR:L\/UI:N\/S:C\/C:L\/I:L\/A:N<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

AI Analysis<\/h3>\n\n\n\n\n\n\n
AI Description<\/th>\nThe Mmm Unity Loader WordPress plugin is vulnerable to Stored Cross-Site Scripting (XSS) due to insufficient input sanitization. This allows authenticated attackers with Contributor access to inject scripts that execute when users access the page. The vulnerability affects all versions up to 1.0.<\/td>\n<\/tr>\n
AI Severity<\/th>\nMedium<\/td>\n<\/tr>\n
AI Vendor<\/th>\nWordPress Community<\/td>\n<\/tr>\n
AI Product<\/th>\nMmm Unity Loader<\/td>\n<\/tr>\n
AI Version<\/th>\n1.0<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

Affected Products<\/h4>\n