PT-2025-43237 · Juergen Schulze · Emu2

Published 2025-10-22 · Updated 2025-11-18 · CVE-2025-52750

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Emu2 versions prior to 0.83b

Description A Reflected Cross-site Scripting (XSS) issue exists in the emu2-email-users-2 component of Emu2. This occurs due to improper neutralization of input during web page generation. The issue allows for the injection of malicious scripts into web pages, potentially compromising user data or system security.

Recommendations Update Emu2 to a version greater than 0.83b.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-52750

Affected Products

Emu2

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-52750 · Security Note
• https://vdp.patchstack.com/database/Wordpress/Plugin/emu2-email-users-2/vulnerability/wordpress-emu2-plugin-0-83b-cross-site-scripting-xss-vulnerability?_s_id=cve · Note
• https://patchstack.com/database/Wordpress/Plugin/emu2-email-users-2/vulnerability/wordpress-emu2-plugin-0-83b-cross-site-scripting-xss-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/1990786298311741586 · Twitter Post
• https://vdp.patchstack.com/database/Wordpress/Plugin/emu2-email-users-2/vulnerability/wordpress-emu2-plugin-0-83b-cross-site-scripting-xss-vulnerability · Note