CVE-2025-28922
CVSS 3.1 Score 7.1 of 10 (high)
Details
Published Mar 11, 2025
CWE ID 352
Summary
CVE-2025-28922 is a newly disclosed vulnerability affecting the Go To Top application, from an unknown version up to 0.0.8. This issue combines two threats: a Cross-Site Request Forgery (CSRF) weakness and Stored Cross-Site Scripting (XSS). An attacker exploiting the CSRF vulnerability could force authenticated users to perform unintended actions, while the Stored XSS component enables an attacker to inject malicious scripts that linger in the webpage, posing a risk to future visitors.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- WordPress