CVE-2025-31743

Summary

CVE-2025-31743 is a Cross-site Scripting (XSS) vulnerability affecting the wpszaki Lightweight and Responsive Youtube Embed plugin. The issue arises due to improper neutralization of user input during web page generation. An attacker can exploit this flaw to inject malicious code into a website, leading to unintended execution of malicious scripts in users' browsers. Stored XSS attacks can persist even after the initial exploit has been patched, posing a significant risk to website visitors. The vulnerability has been reported to impact versions of the plugin from n/a through 1.0.0. Updating to the latest version or disabling the plugin is recommended as mitigation measures.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.