{"affected":[],"aliases":["CVE-2025-15701"],"database_specific":{"cwe_ids":[],"github_reviewed":false,"github_reviewed_at":null,"nvd_published_at":"2026-11-05T06:17:04Z","severity":null},"details":"The Easy Social Icons WordPress plugin before 4.0.3 does not sanitise and escape some of its settings before outputting them on front-end pages, which could allow high-privilege users such as Administrators to perform Stored Cross-Site Scripting attacks when the unfiltered_html capability is disallowed, for example on a multisite network.","id":"GHSA-5357-j85q-w34p","modified":"2026-11-05T06:34:37Z","published":"2026-11-05T06:34:37Z","references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-15701"},{"type":"WEB","url":"https://wpscan.com/vulnerability/32a2349b-515e-4616-ab53-a7a536ade5a7"}],"schema_version":"1.4.0","severity":[]}