CVE-2025-58031: WordPress Nextend Facebook Connect Plugin <= 3.1.19 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nextendweb Nextend Facebook Connect allows Stored XSS. This issue affects Nextend Facebook Connect : from n/a through 3.1.19.
Other sources
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nextendweb Nextend Facebook Connect nextend-facebook-connect allows Stored XSS.This issue affects Nextend Facebook Connect : from n/a through <= 3.1.19.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-58031?
CVE-2025-58031 is classified as a Stored Cross-site Scripting (XSS) vulnerability.
How do I fix CVE-2025-58031?
To mitigate CVE-2025-58031, upgrade the Nextend Facebook Connect plugin to version 3.1.20 or later.
What versions are affected by CVE-2025-58031?
CVE-2025-58031 affects Nextend Facebook Connect versions up to and including 3.1.19.
What is the impact of CVE-2025-58031?
Exploitation of CVE-2025-58031 allows attackers to execute arbitrary JavaScript in the context of the affected user's session.
Which applications are impacted by CVE-2025-58031?
CVE-2025-58031 impacts both the Nextend Facebook Connect and WordPress Nextend Facebook Connect Plugin.