CVE-2025-1232
Published: 19 March 2025
Summary
CVE-2025-1232 is a high-severity Cross-site Scripting (CWE-79) vulnerability in Geminilabs Site Reviews. Its CVSS base score is 8.8 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked in the top 3.3% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-15 (Information Output Filtering).
Deeper analysis
The vulnerability CVE-2025-1232 is a stored cross-site scripting flaw (CWE-79) in the Site Reviews WordPress plugin before version 7.2.5. The plugin fails to properly sanitize and escape data in some Review fields, resulting in a CVSS 3.1 score of 8.8.
Unauthenticated attackers can supply malicious input through review submissions that is stored and later executed in victims' browsers. Successful exploitation grants the ability to achieve high impact on confidentiality, integrity, and availability without requiring authentication or user interaction beyond viewing affected content.
The WPScan advisory at https://wpscan.com/vulnerability/c4ea8357-ddd7-48ac-80c9-15b924715b14/ addresses the issue and is the primary public reference for mitigation steps, including the availability of a fixed release.
EPSS for CVE-2025-1232 rose materially from a low baseline to a peak of 0.7724 on 2026-02-11 before receding to the current value of 0.2892, indicating post-disclosure exploitation interest that later moderated.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2025-6715
Vulnerability details
The Site Reviews WordPress plugin before 7.2.5 does not properly sanitise and escape some of its Review fields, which could allow unauthenticated users to perform Stored XSS attacks
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Stored XSS in public-facing WordPress plugin directly enables T1190 (exploiting public-facing app via unsanitized review submission) and T1059.007 (persistent malicious JavaScript execution in browser for cookie theft/impersonation).
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Directly requires validation and sanitization of user inputs to Review fields, preventing injection of malicious scripts in the Site Reviews WordPress plugin.
Mandates filtering and escaping of information outputs from Review fields, blocking execution of stored malicious scripts when viewed by users.
Ensures identification, reporting, and correction of the sanitization flaw in vulnerable plugin versions before exploitation occurs.