PT-2025-38848 · Unknown · E-Namad &Amp; Shamed Logo Manager

Published 2025-09-22 · Updated 2025-09-22 · CVE-2025-57998

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Hamid Reza Yazdani E-namad & Shamed Logo Manager versions through 2.2

Description The software contains a flaw related to improper handling of user-supplied data when creating web pages, potentially leading to Cross-site Scripting (XSS). This allows for the injection of malicious scripts into web pages viewed by other users. The issue is identified as Stored XSS, meaning the malicious script is persistently stored on the target server.

Recommendations Update to a version later than 2.2. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-57998

Affected Products

E-Namad &Amp; Shamed Logo Manager

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-57998 · Security Note
• https://patchstack.com/database/Wordpress/Plugin/e-namad-shamed-logo-manager/vulnerability/wordpress-e-namad-shamed-logo-manager-plugin-2-2-cross-site-scripting-xss-vulnerability?_s_id=cve · Note
• https://patchstack.com/database/wordpress/plugin/e-namad-shamed-logo-manager/vulnerability/wordpress-e-namad-shamed-logo-manager-plugin-2-2-cross-site-scripting-xss-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/1970255674413318501 · Twitter Post