CVE-2025-57988: WordPress Uncanny Toolkit for LearnDash Plugin <= 3.7.0.3 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Uncanny Owl Uncanny Toolkit for LearnDash allows Stored XSS. This issue affects Uncanny Toolkit for LearnDash: from n/a through 3.0.7.3.
Other sources
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Uncanny Owl Uncanny Toolkit for LearnDash uncanny-learndash-toolkit allows Stored XSS.This issue affects Uncanny Toolkit for LearnDash: from n/a through <= 3.7.0.3.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-57988?
CVE-2025-57988 is rated as a high-severity vulnerability due to its potential for stored cross-site scripting (XSS) attacks.
How do I fix CVE-2025-57988?
To fix CVE-2025-57988, you should update Uncanny Toolkit for LearnDash to version 3.0.7.4 or later.
What types of attacks can CVE-2025-57988 lead to?
CVE-2025-57988 can lead to stored cross-site scripting (XSS) attacks, allowing attackers to inject malicious scripts.
Which versions of Uncanny Toolkit for LearnDash are affected by CVE-2025-57988?
CVE-2025-57988 affects Uncanny Toolkit for LearnDash versions prior to 3.0.7.4.
Is there a known exploitation method for CVE-2025-57988?
Yes, the exploitation method for CVE-2025-57988 typically involves injecting malicious scripts that are stored and executed in the user’s browser.