CVE-2025-30545
CVSS 3.1 Score 5.9 of 10 (medium)
Details
Published Mar 24, 2025
Updated: Mar 27, 2025
CWE ID 79
Summary
CVE-2025-30545 is a Cross-site Scripting (XSS) vulnerability affecting the issuuPress software, from an unknown version up to 1.3.2. The flaw, named Improper Neutralization of Input During Web Page Generation, enables an attacker to inject malicious scripts into web pages generated by the application. A successful attack could lead to stolen user data or unauthorized actions on behalf of the user. Users of issuuPress are strongly urged to update to the latest version to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- WordPress