Description
WordPress和WordPress plugin都是WordPress基金会的产品。WordPress是一套使用PHP语言开发的博客平台。该平台支持在PHP和MySQL的服务器上架设个人博客网站。WordPress plugin是一个应用插件。 WordPress plugin Auction Nudge – Your eBay on Your Site 7.2.0版本及之前版本存在跨站脚本漏洞，该漏洞源于网页生成过程中输入的中和不当，导致跨站脚本漏洞。
WordPress plugin Auction Nudge – Your eBay on Your Site 跨站脚本漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://avd.aliyun.com/detail?id=AVD-2025-24658
https://cve.imfht.com/detail/CVE-2025-24658
https://patchstack.com/database/Wordpress/Plugin/auction-nudge/vulnerability/wordpress-auction-nudge-your-ebay-on-your-site-plugin-7-2-0-cross-site-scripting-xss-vulnerability
https://www.cve.org/CVERecord?id=CVE-2025-24658
https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/auction-nudge/auction-nudge-your-ebay-on-your-site-720-authenticated-administrator-stored-cross-site-scripting
https://devhub.checkmarx.com/cve-details/cve-2025-24658/