CVE-2025-22276

Summary

CVE-2025-22276 is a Cross-site Scripting (XSS) vulnerability affecting the Enguerran Weiss Related Post Shortcode. The flaw, located in the input neutralization process during web page generation, enables attackers to inject and execute malicious scripts. This stored XSS vulnerability exists from version n/a through 1.2, potentially putting websites using this shortcode at risk for data theft or unauthorized actions. Successful exploitation of this flaw could lead to the compromise of user sessions or privileges. It's important for users of the Enguerran Weiss Related Post Shortcode to update to the latest, secure version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.