CVE-2025-2479

The Easy Custom Admin Bar plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘msg’ parameter in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.

Meldingen over deze CVE

1 meldingen uit 1 bronnen, oudste eerst

Ransomware incidents in Japan in the first half of 2026: Investigation of The Gentlemen’s infrastructure and evidence of Qilin's AI use
Cisco Talos IntelligenceOnderzoek17 sep
Actief misbruikt, ransomwareCVSS 9,8EPSS 99%CVE-2020-1472 CVE-2025-24799 CVE-2025-2479 Cisco
42middel

CVE-2025-2479

Meldingen over deze CVE

Ransomware incidents in Japan in the first half of 2026: Investigation of The Gentlemen’s infrastructure and evidence of Qilin's AI use