CVE-2025-31817
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Apr 1, 2025
CWE ID 79
Summary
CVE-2025-31817 is a Cross-Site Scripting (XSS) vulnerability affecting WPWheels BlockWheels from versions n/a through 1.0.1. The issue lies in the improper neutralization of user input during web page generation. An attacker can inject malicious scripts into a web page, allowing for DOM-Based XSS attacks. This can result in unauthorized access to user data or sessions, potentially leading to further exploitation. It is essential for users to update their BlockWheels plugin to the latest version to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.