CVE-2025-46233: WordPress Sirv plugin <= 7.5.3 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sirv CDN and Image Hosting Sirv sirv allows Stored XSS.This issue affects Sirv: from n/a through <= 7.5.3.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-46233?
CVE-2025-46233 is classified as a high severity vulnerability due to the potential for Stored XSS attacks.
How do I fix CVE-2025-46233?
To mitigate CVE-2025-46233, update to Sirv CDN and Image Hosting version 7.5.4 or later.
What types of systems are affected by CVE-2025-46233?
CVE-2025-46233 affects Sirv CDN and Image Hosting from version n/a to 7.5.3, including its WordPress Plugin.
What is the impact of CVE-2025-46233 on users?
CVE-2025-46233 allows attackers to execute scripts in the context of users' browsers, potentially stealing sensitive information.
Is CVE-2025-46233 an immediate threat to my website?
If you are using an affected version of Sirv CDN and Image Hosting, CVE-2025-46233 poses an immediate security threat that should be addressed.