PT-2025-38873 · Akdevs · Akdevs Genealogical Tree

Published 2025-09-22 · Updated 2025-09-22 · CVE-2025-58023

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions akdevs Genealogical Tree versions through 2.2.5

Description The software contains a flaw related to improper input handling during web page creation, which allows for Stored Cross-site Scripting (XSS). This means malicious scripts can be injected into the web application and executed by other users. The issue impacts akdevs Genealogical Tree.

Recommendations Update akdevs Genealogical Tree to a version later than 2.2.5.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-58023

Affected Products

Akdevs Genealogical Tree

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-58023 · Security Note
• https://patchstack.com/database/wordpress/plugin/genealogical-tree/vulnerability/wordpress-genealogical-tree-plugin-2-2-5-cross-site-scripting-xss-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/1970255698731901125 · Twitter Post
• https://patchstack.com/database/Wordpress/Plugin/genealogical-tree/vulnerability/wordpress-genealogical-tree-plugin-2-2-5-cross-site-scripting-xss-vulnerability?_s_id=cve · Note