CVE-2025-49310: WordPress Frontend Dashboard plugin <= 2.2.8 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in M A Vinoth Kumar Frontend Dashboard allows Stored XSS. This issue affects Frontend Dashboard: from n/a through 2.2.8.
Other sources
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in M A Vinoth Kumar Frontend Dashboard frontend-dashboard allows Stored XSS.This issue affects Frontend Dashboard: from n/a through <= 2.2.8.
— MITRE
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-49310?
The severity of CVE-2025-49310 is considered high due to its potential for stored cross-site scripting (XSS) attacks.
How do I fix CVE-2025-49310?
To fix CVE-2025-49310, update the Frontend Dashboard to version 2.2.9 or higher, where the vulnerability has been patched.
What software is affected by CVE-2025-49310?
CVE-2025-49310 affects M A Vinoth Kumar Frontend Dashboard versions from n/a up to 2.2.8.
What type of vulnerability is CVE-2025-49310?
CVE-2025-49310 is an improper neutralization of input during web page generation, leading to stored cross-site scripting (XSS) vulnerability.
Can CVE-2025-49310 affect user data?
Yes, CVE-2025-49310 can affect user data as it allows attackers to inject malicious scripts that can compromise user privacy and security.