CVE-2025-24599: WordPress Newsletters plugin <= 4.9.9.6 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tribulant Software Newsletters newsletters-lite allows Reflected XSS.This issue affects Newsletters: from n/a through <= 4.9.9.6.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-24599?
CVE-2025-24599 is classified as a medium severity vulnerability due to its potential for reflected cross-site scripting.
How do I fix CVE-2025-24599?
To fix CVE-2025-24599, update Tribulant Newsletters or WordPress Newsletters plugin to version 4.9.9.7 or later.
Who is affected by CVE-2025-24599?
CVE-2025-24599 affects users of Tribulant Newsletters and WordPress Newsletters plugin up to version 4.9.9.6.
What type of vulnerability is CVE-2025-24599?
CVE-2025-24599 is a reflected cross-site scripting (XSS) vulnerability.
When was CVE-2025-24599 discovered?
The discovery date of CVE-2025-24599 is not specified but it generally falls within the regular vulnerability assessment timeline.