- Description
 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginOps MailChimp Subscribe Forms allows Stored XSS. This issue affects MailChimp Subscribe Forms : from n/a through 4.1.
 - Source
 - audit@patchstack.com
 - NVD status
 - Received
 
CVSS 3.1
- Type
 - Secondary
 - Base score
 - 6.5
 - Impact score
 - 3.7
 - Exploitability score
 - 2.3
 - Vector string
 - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
 - Severity
 - MEDIUM
 
- audit@patchstack.com
 - CWE-79
 
- Hype score
 - Not currently trending
 
CVE-2025-22727 Stored XSS in PluginOps MailChimp Subscribe Forms Through Version 4.1 https://t.co/fUlEBPHtUH
@VulmonFeeds
21 Jan 2025
15 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2025-22727 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginOps MailChimp Subscribe Forms allows Stored XSS. This iss… https://t.co/qD0UcH47xp
@CVEnew
21 Jan 2025
263 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes