CVE-2025-31608

Summary

CVE-2025-31608 is a Cross-site Scripting (XSS) vulnerability affecting the CookieHint WP plugin from reDim GmbH. The flaw, which permits Stored XSS attacks, arises due to improper neutralization of user input during the generation of web pages. This issue can potentially be exploited by attackers to inject malicious scripts into a victim's browser, leading to unauthorized access, data theft, or other malicious activities. The vulnerability has been identified in all versions of CookieHint WP from n/a through 1.0.0. It is crucial for users to update their plugins to the latest, secure version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.