PT-2025-54310 · Lvaudore · The Moneytizer

Dj + 1 · Published 2025-12-31 · Updated 2026-01-01 · CVE-2025-62756

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions lvaudore The Moneytizer versions through 10.0.6

Description The Moneytizer is susceptible to a DOM-Based Cross-Site Scripting issue due to improper neutralization of input during web page generation. This allows for potential execution of malicious scripts within the user's browser.

Recommendations Update lvaudore The Moneytizer to a version later than 10.0.6.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-62756

Affected Products

The Moneytizer

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-62756 · Security Note
• https://patchstack.com/database/Wordpress/Plugin/the-moneytizer/vulnerability/wordpress-the-moneytizer-plugin-10-0-6-cross-site-scripting-xss-vulnerability?_s_id=cve · Note
• https://t.me/CVEtracker/41069 · Telegram Post
• https://twitter.com/CVEnew/status/2006736862006960564 · Twitter Post
• https://vdp.patchstack.com/database/wordpress/plugin/the-moneytizer/vulnerability/wordpress-the-moneytizer-plugin-10-0-6-cross-site-scripting-xss-vulnerability?_s_id=cve · Note
• https://patchstack.com/database/wordpress/plugin/the-moneytizer/vulnerability/wordpress-the-moneytizer-plugin-10-0-6-cross-site-scripting-xss-vulnerability?_s_id=cve · Note
• https://t.me/cveNotify/147315 · Telegram Post