CVE-2025-5083

CVE-2025-5083 describes a Stored Cross-Site Scripting (XSS) vulnerability in the Amministrazione Trasparente WordPress plugin, affecting all versions up to and including 9.0. This flaw, stemming from insufficient input sanitization, allows authenticated administrators to inject malicious web scripts into pages, which execute when other users view those pages. It specifically impacts multi-site installations or those with unfiltered_html disabled. The vulnerability is rated Medium severity (CVSS 5.5), indicating a network-based attack with low complexity, requiring high privileges to achieve partial confidentiality and integrity impact. While the attack itself is straightforward, the need for administrator-level access limits its broad applicability. Currently, there is no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) is available. Community discussion and media coverage for this CVE are minimal, suggesting low public awareness and a lack of widespread attention.