{"vulnerability": "CVE-2025-5842", "sightings": [{"uuid": "bdffbca9-0a9f-4add-bfff-a4e853db0d90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-5842", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lsj4vfjqey2i", "content": "", "creation_timestamp": "2025-06-26T12:29:34.292266Z"}, {"uuid": "9ecf6133-b31e-44d5-9e71-5b20d119f32b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-58423", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4ytsgq2iua2", "content": "", "creation_timestamp": "2025-11-07T00:41:46.982554Z"}, {"uuid": "bc346f6a-0157-4464-bfe1-1ee1a05748de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-58428", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3m3w2c3z4fs2j", "content": "", "creation_timestamp": "2025-10-24T04:34:20.972403Z"}, {"uuid": "b5e35afd-f75e-4c26-8a12-5bf80b1c4bb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-58423", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m4z22exi7k2x", "content": "", "creation_timestamp": "2025-11-07T02:33:12.221038Z"}, {"uuid": "5935bf9e-3e92-44b9-bc3c-9433f91a737e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-58429", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3m3wedryapw26", "content": "", "creation_timestamp": "2025-10-24T07:34:14.546409Z"}, {"uuid": "a028108d-6f6d-46f4-82b1-fb39d4e27c92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-58422", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lycpjy43tt2p", "content": "", "creation_timestamp": "2025-09-08T07:45:43.437920Z"}, {"uuid": "98e7575c-7bb3-4219-a7d5-c548250b1c91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-58428", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3m45pyzbnz72b", "content": "", "creation_timestamp": "2025-10-27T05:51:35.844493Z"}, {"uuid": "e9335d4f-d14f-4bee-98bc-9ea63ebca13f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-58428", "type": "seen", "source": "https://bsky.app/profile/crowdcyber.bsky.social/post/3m467aywcls2n", "content": "", "creation_timestamp": "2025-10-27T10:24:30.256175Z"}, {"uuid": "777ecfd3-400c-4b0a-8c23-78de6fc6d6fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-58429", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-296-01", "content": "", "creation_timestamp": "2025-10-23T10:00:00.000000Z"}, {"uuid": "28dc7f0a-a482-4aa8-8ef1-8a624e7b8cd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-58428", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-296-03", "content": "", "creation_timestamp": "2025-10-23T10:00:00.000000Z"}, {"uuid": "5a77b0ba-b378-482c-b652-d5696c061164", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-58423", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-310-01", "content": "", "creation_timestamp": "2025-11-06T11:00:00.000000Z"}, {"uuid": "427552c5-e80a-463f-840e-bf3ab3a38e83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-58428", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m3vecc2c2w2e", "content": "", "creation_timestamp": "2025-10-23T22:00:44.028428Z"}, {"uuid": "119632e9-ab2d-41c0-a0d3-717c2d614272", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-58429", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m3vgu35zsr2e", "content": "", "creation_timestamp": "2025-10-23T22:46:28.369045Z"}, {"uuid": "9555ab2d-bdf6-442a-884a-84521c5bc951", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-58427", "type": "seen", "source": "https://infosec.place/objects/079be324-5f3c-4708-ac0e-23f70fb374fb", "content": "", "creation_timestamp": "2026-03-17T19:00:56.939160Z"}, {"uuid": "c05e07b7-ef90-4396-9162-456752581af9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-5842", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/19585", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-5842\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Modern Design Library plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018class\u2019 parameter in all versions up to, and including, 1.1.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-06-26T09:22:02.327Z\n\ud83d\udccf Modified: 2025-06-26T09:22:02.327Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/1be519d5-b505-4b5d-9f14-c8544e8f8298?source=cve\n2. https://plugins.trac.wordpress.org/browser/mdl-shortcodes/trunk/mdl-shortcodes.php#L197\n3. https://wordpress.org/plugins/mdl-shortcodes/#developers\n4. https://plugins.trac.wordpress.org/changeset/3317171/", "creation_timestamp": "2025-06-26T09:50:44.000000Z"}, {"uuid": "6941a6c8-f4d0-4f18-9691-e342efded729", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-58428", "type": "seen", "source": "https://t.me/hackyourmom/13031", "content": "\u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u0437 \u043a\u0456\u0431\u0435\u0440\u0431\u0435\u0437\u043f\u0435\u043a\u0438 \u0442\u0430 \u0456\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043d\u043e\u0457 \u0431\u0435\u0437\u043f\u0435\u043a\u0438 \ud83c\uddfa\ud83c\uddf8 (**CISA**) \u043f\u043e\u0432\u0456\u0434\u043e\u043c\u0438\u043b\u043e \u043f\u0440\u043e \u0434\u0432\u0456 \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u0456 \u0443\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0456 \u0443 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Veeder-Root TLS4B, \u0449\u043e \u0432\u0438\u043a\u043e\u0440\u0438\u0441\u0442\u043e\u0432\u0443\u044e\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u043c\u043e\u043d\u0456\u0442\u043e\u0440\u0438\u043d\u0433\u0443 \u043f\u0430\u043b\u0438\u0432\u043d\u0438\u0445 \u0440\u0435\u0437\u0435\u0440\u0432\u0443\u0430\u0440\u0456\u0432 \ud83e\udd14\ud83d\udc7e\n\n1\ufe0f\u20e3 \u2014 CVE-2025-58428, \u043f\u043e\u0432\u2019\u044f\u0437\u0430\u043d\u0430 \u0437 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u044e \u0456\u043d\u2019\u0454\u043a\u0446\u0456\u0454\u044e \u0447\u0435\u0440\u0435\u0437 SOAP-\u0456\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441, \u0434\u043e\u0437\u0432\u043e\u043b\u044f\u0454 \u0432\u0456\u0434\u0434\u0430\u043b\u0435\u043d\u043e \u0432\u0438\u043a\u043e\u043d\u0443\u0432\u0430\u0442\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u0456 \u043a\u043e\u043c\u0430\u043d\u0434\u0438. \n2\ufe0f\u20e3 \u2014 CVE-2025-55067, \u0432\u0438\u043a\u043b\u0438\u043a\u0430\u043d\u0430 \u043f\u0435\u0440\u0435\u043f\u043e\u0432\u043d\u0435\u043d\u043d\u044f\u043c \u0446\u0456\u043b\u0438\u0445 \u0447\u0438\u0441\u0435\u043b \u043f\u0456\u0434 \u0447\u0430\u0441 \u043e\u0431\u0440\u043e\u0431\u043a\u0438 \u0447\u0430\u0441\u043e\u0432\u0438\u0445 \u0437\u043d\u0430\u0447\u0435\u043d\u044c, \u043c\u043e\u0436\u0435 \u0441\u043f\u0440\u0438\u0447\u0438\u043d\u0438\u0442\u0438 \u0437\u0431\u043e\u0457 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0456\u0457 \u0442\u0430 \u0432\u0456\u0434\u043c\u043e\u0432\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0433\u043e\u0432\u0443\u0432\u0430\u043d\u043d\u0456.\n\n \u0426\u0456 \u043f\u043e\u043c\u0438\u043b\u043a\u0438 \u0441\u0442\u0430\u043d\u043e\u0432\u043b\u044f\u0442\u044c \u0441\u0435\u0440\u0439\u043e\u0437\u043d\u0443 \u0437\u0430\u0433\u0440\u043e\u0437\u0443 \u0434\u043b\u044f \u0435\u043d\u0435\u0440\u0433\u0435\u0442\u0438\u0447\u043d\u043e\u0457 \u0456\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0438 \u0442\u0430 \u0432\u0438\u043c\u0430\u0433\u0430\u044e\u0442\u044c \u043d\u0435\u0433\u0430\u0439\u043d\u043e\u0433\u043e \u043e\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044f \u0441\u0438\u0441\u0442\u0435\u043c \u0434\u043e \u0432\u0435\u0440\u0441\u0456\u0457 TLS4B 11.A \ud83d\uddfd\ud83d\udc68\u200d\ud83d\udcbb #cybernews", "creation_timestamp": "2025-10-28T11:14:33.000000Z"}]}