CVE-2025-52750: WordPress Emu2 plugin <= 0.83b - Cross Site Scripting (XSS) vulnerability

Q: Who can exploit this issue?

The CVSS vector indicates that exploitation can be performed over the network and does not require attacker privileges. It does require user interaction.

Q: What is the expected impact if exploitation succeeds?

The reported severity is high with a CVSS score of 7.1. The vector identifies low impacts to confidentiality, integrity, and availability, with scope changed.

Q: Which deployments should be considered affected?

Emu2 installations using version 0.83b or an earlier version should be considered affected. The available data does not identify a fixed version.

Published Oct 22, 2025

Updated

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juergen Schulze Emu2 emu2-email-users-2 allows Reflected XSS.This issue affects Emu2: from n/a through <= 0.83b.

Affected Software

2 affected components

Juergen Schulze Emu2<=0.83b

WordPress Emu2 plugin<=0.83b

Event History

Oct 22, 2025

CVE Published

via MITRE·02:32 PM

Data Sourced

via MITRE·02:32 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·03:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

The CVSS vector indicates that exploitation can be performed over the network and does not require attacker privileges. It does require user interaction.

What is the expected impact if exploitation succeeds?

The reported severity is high with a CVSS score of 7.1. The vector identifies low impacts to confidentiality, integrity, and availability, with scope changed.

Which deployments should be considered affected?

Emu2 installations using version 0.83b or an earlier version should be considered affected. The available data does not identify a fixed version.

CVE-2025-52750: WordPress Emu2 plugin <= 0.83b - Cross Site Scripting (XSS) vulnerability

Affected Software

Event History

Frequently Asked Questions

Who can exploit this issue?

What is the expected impact if exploitation succeeds?

Which deployments should be considered affected?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What is the expected impact if exploitation succeeds?

Which deployments should be considered affected?