{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-04-14T22:27:39.464","vulnerabilities":[{"cve":{"id":"CVE-2025-25156","sourceIdentifier":"audit@patchstack.com","published":"2025-02-07T10:15:21.457","lastModified":"2026-04-01T17:18:29.930","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-Site Request Forgery (CSRF) vulnerability in Stanko Metodiev Quote Comments quote-comments allows Stored XSS.This issue affects Quote Comments: from n\/a through <= 3.0.0."},{"lang":"es","value":"La vulnerabilidad de Cross-Site Request Forgery (CSRF) en Stanko Metodiev Quote Comments permite XSS almacenado. Este problema afecta a los comentarios de citas: desde n\/a hasta 2.2.1."}],"metrics":{},"weaknesses":[{"source":"audit@patchstack.com","type":"Secondary","description":[{"lang":"en","value":"CWE-352"}]}],"references":[{"url":"https:\/\/patchstack.com\/database\/Wordpress\/Plugin\/quote-comments\/vulnerability\/wordpress-quote-comments-plugin-2-2-1-csrf-to-stored-xss-vulnerability?_s_id=cve","source":"audit@patchstack.com"}]}}]}