CVE-2025-31861
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Apr 1, 2025
CWE ID 79
Summary
CVE-2025-31861 is a Cross-site Scripting (XSS) vulnerability affecting WPOrbit's Support Perfect Font Awesome Integration plugin. The flaw, which permits Stored XSS attacks, resides in the plugin's improper neutralization of user input during web page generation. Attackers can exploit this vulnerability by injecting malicious scripts into the plugin, enabling them to execute arbitrary code in the context of affected users. This issue affects Perfect Font Awesome Integration versions 2.2 and below.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- WordPress