CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-28871

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jwpegram Block Spam By Math Reloaded block-spam-by-math-reloaded allows Stored XSS.This issue affects Block Spam By Math Reloaded: from n/a through <= 2.2.4.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 22.1%

CVSS Severity

CVSS v3 Score 5.9

References

https://patchstack.com/database/Wordpress/Plugin/block-spam-by-math-reloaded/vulnerability/wordpress-block-spam-by-math-reloaded-plugin-2-2-4-cross-site-scripting-xss-vulnerability?_s_id=cve

Products affected by CVE-2025-28871

Jwpegram » Block Spam By Math Reloaded » Version: 1.00

cpe:2.3:a:jwpegram:block_spam_by_math_reloaded:1.00
Jwpegram » Block Spam By Math Reloaded » Version: 2.0.2

cpe:2.3:a:jwpegram:block_spam_by_math_reloaded:2.0.2
Jwpegram » Block Spam By Math Reloaded » Version: 2.00

cpe:2.3:a:jwpegram:block_spam_by_math_reloaded:2.00
Jwpegram » Block Spam By Math Reloaded » Version: 2.01

cpe:2.3:a:jwpegram:block_spam_by_math_reloaded:2.01
Jwpegram » Block Spam By Math Reloaded » Version: 2.1

cpe:2.3:a:jwpegram:block_spam_by_math_reloaded:2.1
Jwpegram » Block Spam By Math Reloaded » Version: 2.1.1

cpe:2.3:a:jwpegram:block_spam_by_math_reloaded:2.1.1
Jwpegram » Block Spam By Math Reloaded » Version: 2.2.0

cpe:2.3:a:jwpegram:block_spam_by_math_reloaded:2.2.0
Jwpegram » Block Spam By Math Reloaded » Version: 2.2.1

cpe:2.3:a:jwpegram:block_spam_by_math_reloaded:2.2.1
Jwpegram » Block Spam By Math Reloaded » Version: 2.2.2

cpe:2.3:a:jwpegram:block_spam_by_math_reloaded:2.2.2
Jwpegram » Block Spam By Math Reloaded » Version: 2.2.3

cpe:2.3:a:jwpegram:block_spam_by_math_reloaded:2.2.3
Jwpegram » Block Spam By Math Reloaded » Version: 2.2.4

cpe:2.3:a:jwpegram:block_spam_by_math_reloaded:2.2.4

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-28871

Products

Pricing

Contact Us