CVE-2025-32211: WordPress Broadstreet plugin <= 1.52.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Broadstreet Broadstreet Ads broadstreet allows Stored XSS.This issue affects Broadstreet Ads: from n/a through <= 1.52.1.
Other sources
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Broadstreet Broadstreet allows Stored XSS. This issue affects Broadstreet: from n/a through 1.51.2.
— NVD
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-32211?
CVE-2025-32211 is a high-severity vulnerability due to its potential for stored cross-site scripting (XSS).
How do I fix CVE-2025-32211?
To fix CVE-2025-32211, upgrade Broadstreet to version 1.51.3 or later as recommended by the vendor.
What software is affected by CVE-2025-32211?
CVE-2025-32211 affects Broadstreet from versions n/a through 1.51.2 and the WordPress Broadstreet plugin up to version 1.51.2.
What are the implications of CVE-2025-32211?
CVE-2025-32211 can allow an attacker to execute arbitrary JavaScript in the context of the user's browser, leading to potential data theft or session hijacking.
Is there a workaround for CVE-2025-32211 before I can update?
Currently, no official workaround is provided for CVE-2025-32211, so updating the software is the recommended solution.