{"id":"CVE-2025-22622","aliases":["EUVD-2025-4752","GHSA-whg9-m2vx-fwf2"],"status":"published","title":"Age Verification - Reflected cross-site scripting (XSS)","description":"Age Verification for your checkout page. Verify your customer's identity 1.20.0 was found to be vulnerable. The web application dynamically generates web content without validating the source of the potentially untrusted data in myapp/class-wc-integration-agechecker-integration.php.","severity":{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00284,"percentile":0.21183,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-79"],"published":"2025-02-19T03:51:33Z","modified":"2026-06-17T08:48:47Z","products":[{"vendor":"age checker","product":"age verification"}],"references":[{"url":"https://fluidattacks.com/advisories/skims-5/","tags":["third-party-advisory"]},{"url":"https://wordpress.org/plugins/agecheckernet/#developers","tags":["release-notes"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-22622"},{"url":"https://fluidattacks.com/advisories/skims-5"},{"url":"https://github.com/advisories/GHSA-whg9-m2vx-fwf2"}],"sources":{"cve":[{"id":"CVE-2025-22622","title":"Age Verification - Reflected cross-site scripting (XSS)","description":"Age Verification for your checkout page. Verify your customer's identity 1.20.0 was found to be vulnerable. The web application dynamically generates web content without validating the source of the potentially untrusted data in myapp/class-wc-integration-agechecker-integration.php.","status":"published","published":"2025-02-19T03:51:33.892Z","modified":"2025-02-19T15:08:18.689Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:32:28.943062Z"}],"euvd":[{"id":"EUVD-2025-4752","description":"Age Verification for your checkout page. Verify your customer's identity 1.20.0 was found to be vulnerable. The web application dynamically generates web content without validating the source of the potentially untrusted data in myapp/class-wc-integration-agechecker-integration.php.","status":"published","published":"2025-02-19T03:51:33Z","modified":"2025-02-19T15:08:18Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T20:53:27.843209Z"}],"ghsa":[{"id":"GHSA-whg9-m2vx-fwf2","title":"Age Verification for your checkout page. Verify your customer's identity 1.20.0 was found to be...","description":"Age Verification for your checkout page. Verify your customer's identity 1.20.0 was found to be vulnerable. The web application dynamically generates web content without validating the source of the potentially untrusted data in myapp/class-wc-integration-agechecker-integration.php.","status":"published","published":"2025-02-19T06:35:14Z","modified":"2025-02-19T06:35:18Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","level":"medium"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:59:58.679357Z"}],"nvd":[{"id":"CVE-2025-22622","description":"Age Verification for your checkout page. Verify your customer's identity 1.20.0 was found to be vulnerable. The web application dynamically generates web content without validating the source of the potentially untrusted data in myapp/class-wc-integration-agechecker-integration.php.","status":"published","published":"2025-02-19T04:15:10.55Z","modified":"2026-06-17T08:48:47.147Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:10:51.445921Z"}]}}