CVE-2025-22296: WordPress Hash Elements plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hashthemes Hash Elements hash-elements.This issue affects Hash Elements: from n/a through <= 1.5.0.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-22296?
CVE-2025-22296 is classified as a cross-site scripting (XSS) vulnerability, which can lead to severe consequences if exploited.
How do I fix CVE-2025-22296?
To fix CVE-2025-22296, you should update Hash Elements to version 1.5.0 or later, which addresses the vulnerability.
What software is affected by CVE-2025-22296?
CVE-2025-22296 affects Hash Themes Hash Elements versions from n/a up to 1.4.9.
What type of vulnerability is CVE-2025-22296?
CVE-2025-22296 is an improper neutralization of input during web page generation, commonly known as a cross-site scripting (XSS) vulnerability.
Can CVE-2025-22296 be exploited remotely?
Yes, CVE-2025-22296 can be exploited remotely by attackers who can inject malicious scripts into web pages accessed by users.