CVE-2025-22706
CVSS 3.1 Score 7.1 of 10 (high)
Details
Published Jan 21, 2025
CWE ID 79
Summary
CVE-2025-22706 is a Cross-Site Scripting (XSS) vulnerability affecting the Social Pug: Author Box plugin. The issue arises due to improper neutralization of user input during web page generation. Malicious scripts can be reflected, posing a significant security risk. This vulnerability impacts versions of Social Pug: Author Box from undisclosed to 1.0.0. It is crucial for users to update their plugins and employ content security policies to mitigate the risks associated with reflected XSS attacks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.