CVE-2025-11241

{
  "id": "CVE-2025-11241",
  "sourceIdentifier": "[email protected]",
  "published": "2025-10-03T02:15:30.483",
  "lastModified": "2026-10-19T17:10:00.173",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The Yoast SEO Premium plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions 25.7 to 25.9 due to a flawed regex used to remove an attribute in post content, which can be abused to inject arbitrary HTML attributes, including JavaScript event handlers. This vulnerability allows a user with Contributor access or higher to create a post containing a malicious JavaScript payload."
    },
    {
      "lang": "es",
      "value": "El plugin Yoast SEO Premium para WordPress es vulnerable a Cross-Site Scripting Almacenado en las versiones 25.7 a 25.9 debido a una expresión regular (regex) defectuosa utilizada para eliminar un atributo en el contenido de las publicaciones, que puede ser explotada para inyectar atributos HTML arbitrarios, incluyendo manejadores de eventos JavaScript. Esta vulnerabilidad permite a un usuario con acceso de Colaborador o superior crear una publicación que contenga una carga útil JavaScript maliciosa."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "Yoast SEO Premium",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "25.7",
              "lessThanOrEqual": "25.9",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
          "baseScore": 6.4,
          "baseSeverity": "MEDIUM",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "CHANGED",
          "confidentialityImpact": "LOW",
          "integrityImpact": "LOW",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 3.1,
        "impactScore": 2.7
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2025-10-03T15:49:46.839381Z",
          "id": "CVE-2025-11241",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-80"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://developer.yoast.com/changelog/yoast-seo-premium/26.0/",
      "source": "[email protected]"
    },
    {
      "url": "https://sec.stealthcopter.com/regexss/",
      "source": "[email protected]"
    },
    {
      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/a6e3645d-ed1b-4c51-a463-c2691cb7168d?source=cve",
      "source": "[email protected]"
    }
  ]
}