CVE-2025-30860

Summary

CVE-2025-30860 is a Cross-Site Scripting (XSS) vulnerability affecting the Off-Canvas Sidebars & Menus (Slidebars) plugin by Jory Hogeveen. The flaw, which stems from improper neutralization of user input during web page generation, enables attackers to inject malicious scripts into a targeted website. Successful exploitation could lead to DOM-Based XSS attacks, potentially compromising user data or taking control of user sessions. The vulnerable versions of the plugin span from none identified through 0.5.8.2. Immediate updates to the latest patch are recommended to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.