CVE-2025-22825: WordPress Flexible PDF Coupons plugin < 1.10.3 - Stored Cross Site Scripting (XSS) vulnerability
Published Jan 21, 2025
·Updated
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpdesk Flexible PDF Coupons flexible-coupons allows Stored XSS.This issue affects Flexible PDF Coupons: from n/a through < 1.10.3.
Affected Software
1 affected component
WP Desk Flexible PDF Coupons<1.10.3
Remediation
Information
Update the WordPress Flexible PDF Coupons wordpress plugin to the latest available version (at least 1.10.3).
Event History
Jan 21, 2025
CVE Published
via MITRE·01:57 PM
Data Sourced
via MITRE·01:57 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-22825?
CVE-2025-22825 is a high severity vulnerability that allows stored cross-site scripting (XSS) attacks.
2
How do I fix CVE-2025-22825?
To fix CVE-2025-22825, upgrade your WP Desk Flexible PDF Coupons plugin to version 1.10.4 or later.
3
What versions of WP Desk Flexible PDF Coupons are affected by CVE-2025-22825?
CVE-2025-22825 affects all versions of WP Desk Flexible PDF Coupons up to and including 1.10.3.
4
Can CVE-2025-22825 be exploited remotely?
Yes, CVE-2025-22825 can be exploited remotely via maliciously crafted input.
5
What type of attacks can CVE-2025-22825 facilitate?
CVE-2025-22825 can facilitate stored XSS attacks, allowing attackers to execute scripts in the context of a user's browser.