CVE-2025-58008: WordPress Participants Database Plugin <= 2.7.6.3 - Cross Site Scripting (XSS) Vulnerability
Published Sep 22, 2025
·Updated
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in xnau webdesign Participants Database participants-database allows Stored XSS.This issue affects Participants Database: from n/a through <= 2.7.6.3.
Affected Software
1 affected component
xnau webdesign Participants Database<=2.7.6.3
Event History
Sep 22, 2025
CVE Published
via MITRE·06:24 PM
Data Sourced
via MITRE·06:24 PM
DescriptionWeakness
Data Sourced
via NVD·07:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-58008?
CVE-2025-58008 is classified as a Stored Cross-site Scripting (XSS) vulnerability.
2
How do I fix CVE-2025-58008?
To fix CVE-2025-58008, update the Participants Database plugin to a version later than 2.7.6.3.
3
Which software is affected by CVE-2025-58008?
CVE-2025-58008 affects the Participants Database plugin for WordPress versions up to 2.7.6.3.
4
What impact does CVE-2025-58008 have on users?
CVE-2025-58008 can allow attackers to inject malicious scripts that may be executed in the context of users' browsers.
5
Is CVE-2025-58008 specific to a certain version?
Yes, CVE-2025-58008 specifically affects the Participants Database plugin versions up to and including 2.7.6.3.