CVE-2025-48080: WordPress Uncanny Toolkit for LearnDash plugin <= 3.7.0.2 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Uncanny Owl Uncanny Toolkit for LearnDash allows Stored XSS. This issue affects Uncanny Toolkit for LearnDash: from n/a through 3.7.0.2.
Other sources
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Uncanny Owl Uncanny Toolkit for LearnDash uncanny-learndash-toolkit allows Stored XSS.This issue affects Uncanny Toolkit for LearnDash: from n/a through <= 3.7.0.2.
— MITRE
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-48080?
The severity of CVE-2025-48080 is classified as high, due to its potential for exploitation through stored XSS.
How do I fix CVE-2025-48080?
To fix CVE-2025-48080, update the Uncanny Toolkit for LearnDash to version 3.8.0 or later.
What systems are affected by CVE-2025-48080?
CVE-2025-48080 affects Uncanny Toolkit for LearnDash versions from n/a to 3.7.0.2.
What type of vulnerability is CVE-2025-48080?
CVE-2025-48080 is classified as a Cross-site Scripting (XSS) vulnerability.
What impact does CVE-2025-48080 have on users?
CVE-2025-48080 allows attackers to inject malicious scripts, potentially compromising user data and session integrity.