Medium · 6.5 CVE-2025-47475 EUVD-2025-13843GHSA-p8w7-qmqj-w8gv

WordPress JupiterX Core plugin <= 4.8.11 - Cross Site Scripting (XSS) Vulnerability

Published May 7, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in artbees JupiterX Core jupiterx-core allows Stored XSS.This issue affects JupiterX Core: from n/a through <= 4.8.11.

Affected products

Vendor	Product	Affected	Fixed
artbees	JupiterX Core	≤ 4.8.11	—

References

https://patchstack.com/database/Wordpress/Plugin/jupiterx-core/vulnerability/wordpress-jupiterx-core-4-8-11-cross-site-scripting-xss-vulnerability?_s_id=cve vdb-entry