PT-2025-4558 · Unknown · Grandslambert Featured Page Widget

João Pedro S Alcântara · Published 2025-01-13 · Updated 2025-01-13 · CVE-2025-22569

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

The vulnerable software is grandslambert Featured Page Widget, with versions affected ranging from n/a to 2.2. The vulnerability is an improper neutralization of input during web page generation, also known as Cross-site Scripting (XSS), which allows for Reflected XSS attacks. This vulnerability is identified by the CVE-2025-22569 designation. There is no information provided about whether this vulnerability has a public exploit or if it has been exploited by attackers, nor is there information on how many Internet users could be affected by its exploitation. The vulnerability can be exploited through the reflection of malicious scripts, allowing attackers to execute arbitrary code on the victim's browser. #grandslambert #FeaturedPageWidget #CrossSiteScripting #XSS #ReflectedXSS #CVE202522569 #WebVulnerability #SecurityVulnerability

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-22569

Affected Products

Grandslambert Featured Page Widget

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-22569 · Security Note
• https://patchstack.com/database/wordpress/plugin/featured-page-widget/vulnerability/wordpress-featured-page-widget-plugin-2-2-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve · Note
• https://t.me/cvedetector/15145 · Telegram Post
• https://twitter.com/CVEnew/status/1878799445732491431 · Twitter Post
• https://patchstack.com/database/Wordpress/Plugin/featured-page-widget/vulnerability/wordpress-featured-page-widget-plugin-2-2-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve · Note
• https://twitter.com/VulmonFeeds/status/1878867933062918413 · Twitter Post