CVE-2025-39432
CVSS 3.1 Score 7.1 of 10 (high)
Details
Published Apr 17, 2025
CWE ID 79
Summary
CVE-2025-39432 is a Cross-site Scripting (XSS) vulnerability affecting the bbPress2 shortcode whitelist from an undisclosed version up to 2.2.1. An attacker can exploit this Improper Neutralization of Input vulnerability during web page generation to inject malicious scripts and gain unauthorized access to users' sessions or steal sensitive information. This issue poses a significant risk to websites using the bbPress2 plugin and underscores the importance of keeping software up to date to mitigate security threats.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.