CVE-2025-46502

Summary

CVE-2025-46502 is a Cross-site Scripting (XSS) vulnerability affecting Bas Matthee LSD Custom taxonomy and category meta, from version n/a through 1.3.2. The issue arises due to improper neutralization of user input during web page generation. An attacker can exploit this vulnerability to inject malicious scripts into a webpage and execute them in the context of the targeted user. Additionally, this vulnerability also enables Cross-Site Request Forgery (CSRF) attacks, allowing an attacker to manipulate state changes on the affected website unbeknownst to the user.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.