What is GHSA-j4x3-rc4j-f623?

GHSA-j4x3-rc4j-f623 is a security advisory published by GitHub Security Advisories with Low severity. The Business Name Generator WordPress plugin through 1.3 does not sanitise and escape some of its...

Which CVE IDs does GHSA-j4x3-rc4j-f623 cover?

GHSA-j4x3-rc4j-f623 covers the following CVE IDs: CVE-2025-15698. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-j4x3-rc4j-f623?

GHSA-j4x3-rc4j-f623 has a CVSS v3 base score of 3.5, published by GitHub Security Advisories.

GHSA-j4x3-rc4j-f623LowCVSS 3.5

The Business Name Generator WordPress plugin through 1.3 does not sanitise and escape some of its...

Vendor

GitHub Security Advisories

Published

September 19, 2026

Last Modified

September 19, 2026

🔗 CVE IDs covered (1)

CVE-2025-15698 →

📋 Description

The Business Name Generator WordPress plugin through 1.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2025-15698
https://wpscan.com/vulnerability/c6aa25a4-c795-47e6-9d09-bebe4afc1a08
https://github.com/advisories/GHSA-j4x3-rc4j-f623