CVE-2025-1705 — Cross-site Scripting in Composer

CWE-79 — Cross-site ScriptingCWE-444 — HTTP Request Smuggling4 documents4 sources
Severity
6.1MEDIUMNVD
EPSS
0.2%
top 51.98%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Tagdiv Composer
Timeline
PublishedMar 28

Description

The tagDiv Composer plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.3. This is due to missing or incorrect nonce validation within the td_ajax_get_views AJAX action. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NExploitability: 2.8 | Impact: 2.7

Affected Packages1 packages

▶CVEListV5tagdiv/tagdiv_composer5.3

🔴Vulnerability Details

2
GHSA
GHSA-5vf7-798g-m8fj: The tagDiv Composer plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5↗2025-03-28
▶
CVEList
tagDiv Composer <= 5.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting↗2025-03-28
▶

📋Vendor Advisories

1
Microsoft
Improper sanitization of Transfer-Encoding headers in net/http↗2022-08-09
▶
CVE-2025-1705 — Cross-site Scripting in Tagdiv Composer | cvebase