← CVE Intelligence

CVE-2025-10567

FunnelKit < 3.12.0.1 - Reflected XSS PUBLISHED

Description (CNA)

The FunnelKit WordPress plugin before 3.12.0.1 does not sanitize user input before echoing it back in some of its checkout-related AJAX actions, allowing attackers to conduct reflected XSS attacks against logged-in users.

Affected (CNA)

Vendor / productVersions
Unknown / FunnelKitaffected 0 before 3.12.0.1

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.