{"vulnerability": "cve-2025-3862", "sightings": [{"uuid": "7de0092b-a214-428f-bfe2-8a386930df0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3862", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3loo2k4dokuf2", "content": "", "creation_timestamp": "2025-05-08T14:05:33.754746Z"}, {"uuid": "f1f46057-571c-4801-b5ae-e00bd880f0c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3862", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3loodctcwss2o", "content": "", "creation_timestamp": "2025-05-08T16:27:00.127952Z"}, {"uuid": "3e0fe3ae-d6ec-4c8f-a0f4-9e84a630d7f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-38621", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "24de8733-64a9-48f0-89ae-0794142fe2f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-38626", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "1d72af6f-d84d-4d9b-a358-e0d94fb06b0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2025-38623", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "dc52ec24-c0cd-4b2f-b699-0bfa997f1f3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2025-38624", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "d7f02b17-a898-42c5-9624-fda3ad1e3625", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2025-38626", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "d97d630f-7688-4b93-8092-74bcb4c0a092", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-38627", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0397/", "content": "", "creation_timestamp": "2026-04-02T17:00:00.000000Z"}, {"uuid": "76fad253-6c1e-47d5-9b41-35dc3f99c0fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-38627", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260408", "content": "", "creation_timestamp": "2026-04-07T18:00:00.000000Z"}, {"uuid": "577413bc-9263-4a52-bb08-84dfd8aa1c4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3862", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15508", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3862\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: Contest Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018id\u2019 parameter in all versions up to, and including, 26.0.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-05-08T11:13:44.624Z\n\ud83d\udccf Modified: 2025-05-08T11:13:44.624Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/a1b043a1-7bee-4ef0-86d9-19cf202cfc71?source=cve\n2. https://www.contest-gallery.com/documentation/\n3. https://plugins.trac.wordpress.org/browser/contest-gallery/tags/26.0.5/shortcodes/cg_entry_on_off.php#L20\n4. https://wordpress.org/plugins/contest-gallery/#developers\n5. https://plugins.trac.wordpress.org/changeset/3288915\n6. https://plugins.trac.wordpress.org/browser/contest-gallery/tags/26.0.7/shortcodes/cg_entry_on_off.php#L20", "creation_timestamp": "2025-05-08T11:23:15.000000Z"}, {"uuid": "8c89be40-27b6-4560-bbd9-f5fb686aa755", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3862", "type": "seen", "source": "https://t.me/cvedetector/24819", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3862 - Contest Gallery WordPress Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-3862 \nPublished : May 8, 2025, 12:15 p.m. | 1\u00a0hour, 4\u00a0minutes ago \nDescription : Contest Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018id\u2019 parameter in all versions up to, and including, 26.0.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-08T15:56:37.000000Z"}, {"uuid": "332db566-9de7-4cdc-b95d-f933dcddc58b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-38626", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260803", "content": "", "creation_timestamp": "2026-08-03T04:55:31.631088Z"}, {"uuid": "85864b48-1d9c-4f28-93b2-63105ca72089", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-38626", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260506", "content": "", "creation_timestamp": "2026-05-05T20:00:00.000000Z"}, {"uuid": "68951fd9-c4bb-4230-8de1-ca21f78a5e1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-38627", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260511", "content": "", "creation_timestamp": "2026-05-10T18:00:00.000000Z"}, {"uuid": "d3d44824-1e4f-4964-ae32-16549f1a9195", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-38627", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T05:48:57.980195Z"}, {"uuid": "9c5ebf03-aa28-4b88-b87c-3072e38242b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3862", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117354399908091855", "content": "RE: https://mastodon.bsd.cafe/@stefano/117354014226641780\nSure glad I moved my main workstation to Debian. :brdAngry: \nCVE-2024-5256CVE-2024-5809CVE-2025-2181CVE-2025-2210CVE-2025-2212CVE-2025-3820CVE-2025-3823CVE-2025-3862CVE-2025-3983CVE-2025-3992CVE-2025-4006CVE-2025-4010CVE-2025-4013CVE-2025-4016CVE-2026-10007CVE-2026-100079CVE-2026-2313CVE-2026-4319CVE-2026-4334CVE-2026-4596CVE-2026-5294CVE-2026-5301CVE-2026-5308CVE-2026-5310CVE-2026-5311CVE-2026-5325CVE-2026-5331CVE-2026-6405CVE-2026-6407CVE-2026-6408CVE-2026-6421CVE-2026-6828CVE-2026-6830CVE-2026-6833CVE-2026-7233CVE-2026-7240CVE-2026-7241CVE-2026-7243CVE-2026-7248CVE-2026-7249CVE-2026-7425CVE-2026-7426CVE-2026-7428CVE-2026-7429CVE-2026-7433CVE-2026-7449CVE-2026-7452CVE-2026-7473CVE-2026-7475CVE-2026-8052CVE-2026-8067CVE-2026-8075CVE-2026-8076CVE-2026-8077CVE-2026-8078CVE-2026-8079CVE-2026-8080CVE-2026-8082CVE-2026-8083CVE-2026-8084CVE-2026-8085CVE-2026-8086CVE-2026-8087CVE-2026-8091CVE-2026-8092CVE-2026-8093CVE-2026-8094CVE-2026-8095CVE-2026-8096CVE-2026-8097CVE-2026-8098CVE-2026-8099CVE-2026-8100CVE-2026-8101CVE-2026-8943CVE-2026-8944CVE-2026-8945CVE-2026-8946CVE-2026-8947CVE-2026-8948CVE-2026-8949CVE-2026-8950CVE-2026-8951CVE-2026-8952CVE-2026-8953CVE-2026-8954CVE-2026-8955CVE-2026-8956CVE-2026-8957CVE-2026-8958CVE-2026-8959CVE-2026-8960CVE-2026-8961CVE-2026-8962CVE-2026-8963CVE-2026-8964CVE-2026-8965CVE-2026-8966CVE-2026-8967CVE-2026-8968CVE-2026-8969CVE-2026-8970CVE-2026-8971CVE-2026-8972CVE-2026-8973CVE-2026-8974CVE-2026-8975CVE-2026-8976CVE-2026-8977CVE-2026-8978CVE-2026-8979CVE-2026-8980CVE-2026-8981CVE-2026-8982CVE-2026-8983CVE-2026-8984CVE-2026-8985CVE-2026-8986CVE-2026-8987CVE-2026-8988CVE-2026-8989CVE-2026-8990CVE-2026-8992CVE-2026-8993CVE-2026-8994CVE-2026-8995CVE-2026-8996CVE-2026-8997CVE-2026-8998CVE-2026-8999CVE-2026-9000CVE-2026-9001CVE-2026-9002CVE-2026-9003CVE-2026-9004CVE-2026-9005CVE-2026-9006CVE-2026-9007CVE-2026-9008CVE-2026-9009CVE-2026-9010CVE-2026-9011CVE-2026-9012CVE-2026-9013CVE-2026-9014CVE-2026-9015CVE-2026-9016CVE-2026-9017CVE-2026-9018CVE-2026-9019CVE-2026-9020CVE-2026-9021CVE-2026-9022CVE-2026-9023CVE-2026-9024CVE-2026-9025CVE-2026-9026CVE-2026-9027CVE-2026-9028CVE-2026-9029CVE-2026-9030CVE-2026-9031CVE-2026-9032CVE-2026-9033CVE-2026-9034CVE-2026-9035CVE-2026-9036CVE-2026-9037CVE-2026-9038CVE-2026-9039CVE-2026-9040CVE-2026-9041CVE-2026-9042CVE-2026-9043CVE-2026-9247CVE-2026-9248CVE-2026-9249CVE-2026-9250CVE-2026-9251CVE-2026-9252CVE-2026-9303CVE-2026-9304CVE-2026-9305CVE-2026-9306CVE-2026-9307CVE-2026-9308CVE-2026-9309CVE-2026-9310CVE-2026-9311CVE-2026-9312CVE-2026-9313CVE-2026-9314CVE-2026-9315CVE-2026-9316CVE-2026-9317CVE-2026-9318CVE-2026-9319CVE-2026-9320CVE-2026-9321CVE-2026-9322CVE-2026-9323CVE-2026-9324CVE-2026-9325CVE-2026-9326CVE-2026-9327CVE-2026-9328CVE-2026-9378CVE-2026-9379CVE-2026-9380CVE-2026-9381CVE-2026-9382CVE-2026-9383CVE-2026-9740CVE-2026-9741CVE-2026-9742CVE-2026-9743CVE-2026-9744CVE-2026-9745CVE-2026-9747CVE-2026-9748CVE-2026-9749CVE-2026-9750CVE-2026-9751CVE-2026-9752CVE-2026-9753CVE-2026-9754CVE-2026-9755CVE-2026-9756CVE-2026-9757CVE-2026-9758CVE-2026-9759CVE-2026-9760CVE-2026-9761CVE-2026-9789CVE-2026-9790CVE-2026-9791CVE-2026-9792CVE-2026-9793CVE-2026-9794CVE-2026-9795CVE-2026-9796CVE-2026-9797CVE-2026-9798CVE-2026-9799CVE-2026-9800CVE-2026-9801CVE-2026-9802CVE-2026-9803CVE-2026-9804CVE-2026-9805CVE-2026-9806CVE-2026-9807CVE-2026-9808CVE-2026-9809CVE-2026-9810CVE-2026-9811CVE-2026-9812CVE-2026-9813CVE-2026-9814CVE-2026-9815CVE-2026-9816", "creation_timestamp": "2026-09-29T12:47:15.995929Z"}, {"uuid": "ea2bf82a-3ae5-43e9-82b8-221d7743d7f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-38621", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20261002", "content": "", "creation_timestamp": "2026-10-01T18:00:00.000000Z"}]}