CVE-2025-3832
CVSS 3.1 Score 6.4 of 10 (medium)
Details
Published Apr 24, 2025
Updated: Apr 29, 2025
CWE ID 79
Summary
CVE-2025-3832 is a Stored Cross-Site Scripting (XSS) vulnerability affecting the FuseDesk plugin for WordPress. This issue, present in all versions up to 6.7, permits authenticated attackers with Contributor-level access or higher to inject malicious scripts into the 'successredirect' parameter. As a result, these scripts will execute whenever an affected user visits a manipulated page, posing a significant security risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.