PT-2025-53091 · Unknown · Pixelgrade Category Icon

Published 2025-12-24 · Updated 2025-12-25 · CVE-2025-68525

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions pixelgrade Category Icon versions through 1.0.2

Description The software contains a flaw related to improper input handling during web page generation, which allows for Stored Cross-site Scripting (XSS). This means that malicious scripts can be stored and executed within the application, potentially affecting users who interact with the compromised content. The affected component is the Category Icon feature.

Recommendations Update to a version later than 1.0.2.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-68525

Affected Products

Pixelgrade Category Icon

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-68525 · Security Note
• https://patchstack.com/database/Wordpress/Plugin/category-icon/vulnerability/wordpress-category-icon-plugin-1-0-2-cross-site-scripting-xss-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/2004294934715609165 · Twitter Post
• https://t.me/CVEtracker/40575 · Telegram Post
• https://vdp.patchstack.com/database/Wordpress/Plugin/category-icon/vulnerability/wordpress-category-icon-plugin-1-0-2-cross-site-scripting-xss-vulnerability?_s_id=cve · Note