CVE-2025-49413: WordPress Super Store Finder Plugin <= 7.6 - Reflected Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in highwarden Super Store Finder superstorefinder-wp allows Reflected XSS.This issue affects Super Store Finder: from n/a through <= 7.6.
Other sources
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wishloop Terms of Service & Privacy Policy Generator allows Stored XSS. This issue affects Terms of Service & Privacy Policy Generator: from n/a through 1.0.
— NVD
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-49413?
CVE-2025-49413 is classified as a moderate severity vulnerability due to the potential for stored cross-site scripting (XSS).
How do I fix CVE-2025-49413?
To fix CVE-2025-49413, update the Wishloop Terms of Service & Privacy Policy Generator to the latest version that addresses this vulnerability.
Which software versions are affected by CVE-2025-49413?
CVE-2025-49413 affects Wishloop Terms of Service & Privacy Policy Generator versions up to and including 1.0.
What kind of vulnerability is CVE-2025-49413?
CVE-2025-49413 is a stored cross-site scripting (XSS) vulnerability that allows attackers to inject malicious scripts into web pages.
Is there a known exploit for CVE-2025-49413?
As of the latest information, there are reports of exploitation for CVE-2025-49413 in the wild, making it crucial to apply the security updates promptly.