CVE-2025-8398 | azurecurve BBCode Plugin up to 2.0.4 on WordPress Shortcode url cross site scripting

September 11, 2025 Yanac

A vulnerability, which was classified as problematic, has been found in azurecurve BBCode Plugin up to 2.0.4 on WordPress. Affected is the function url of the component Shortcode Handler. The manipulation leads to cross site scripting.

This vulnerability is uniquely identified as CVE-2025-8398. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More