{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Ultimate Before After Image Slider \u0026 Gallery",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "4.7.1",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Dmitrii Ignatyev"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "WPScan"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The Ultimate Before After Image Slider \u0026 Gallery  WordPress plugin before 4.7.1 does not escape the value of the BEAF Slider widget\u0027s shortcode field before outputting it on the front end (the value is passed through do_shortcode, which echoes non-shortcode content verbatim), allowing users with administrator-level access to store a script that executes in the browser of any visitor who loads a page displaying the widget."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-79 Cross-Site Scripting (XSS)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-14T06:00:01.908Z",
        "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
        "shortName": "WPScan"
      },
      "references": [
        {
          "tags": [
            "exploit",
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://wpscan.com/vulnerability/754f0960-efc8-426f-bb1d-7cceec920910/"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "BEAF \u003c 4.7.1 - Admin+ Stored XSS via Widget Shortcode Field",
      "x_generator": {
        "engine": "WPScan CVE Generator"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
    "assignerShortName": "WPScan",
    "cveId": "CVE-2025-15665",
    "datePublished": "2026-07-14T06:00:01.908Z",
    "dateReserved": "2026-06-23T11:11:48.893Z",
    "dateUpdated": "2026-07-14T06:00:01.908Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2025-15665\",\"sourceIdentifier\":\"contact@wpscan.com\",\"published\":\"2026-07-14T06:16:41.087\",\"lastModified\":\"2026-07-14T06:16:41.087\",\"vulnStatus\":\"Received\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"The Ultimate Before After Image Slider \u0026 Gallery  WordPress plugin before 4.7.1 does not escape the value of the BEAF Slider widget\u0027s shortcode field before outputting it on the front end (the value is passed through do_shortcode, which echoes non-shortcode content verbatim), allowing users with administrator-level access to store a script that executes in the browser of any visitor who loads a page displaying the widget.\"}],\"affected\":[{\"source\":\"contact@wpscan.com\",\"affectedData\":[{\"vendor\":\"Unknown\",\"product\":\"Ultimate Before After Image Slider \u0026 Gallery\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"4.7.1\",\"versionType\":\"semver\",\"status\":\"affected\"}]}]}],\"metrics\":{},\"references\":[{\"url\":\"https://wpscan.com/vulnerability/754f0960-efc8-426f-bb1d-7cceec920910/\",\"source\":\"contact@wpscan.com\"}]}}"
  }
}