PT-2025-54319 · Unknown · Kcseopro Adwords Conversion Tracking Code

Dj + 1 · Published 2025-12-31 · Updated 2026-01-01 · CVE-2025-62118

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions kcseopro AdWords Conversion Tracking Code versions through 1.0

Description The kcseopro AdWords Conversion Tracking Code contains a flaw related to improper neutralization of input during web page generation, leading to a Stored Cross-Site Scripting condition. This allows for the injection of malicious scripts that can be stored and subsequently executed when other users access the affected web page. The issue impacts the AdWords Conversion Tracking Code.

Recommendations Versions prior to 1.0 should be updated.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-62118

Affected Products

Kcseopro Adwords Conversion Tracking Code

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-62118 · Security Note
• https://twitter.com/CVEnew/status/2006736852947251477 · Twitter Post
• https://vdp.patchstack.com/database/wordpress/plugin/adwords-conversion-tracking-code/vulnerability/wordpress-adwords-conversion-tracking-code-plugin-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve · Note
• https://twitter.com/VulmonFeeds/status/2006366427511419233 · Twitter Post
• https://patchstack.com/database/Wordpress/Plugin/adwords-conversion-tracking-code/vulnerability/wordpress-adwords-conversion-tracking-code-plugin-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve · Note
• https://patchstack.com/database/wordpress/plugin/adwords-conversion-tracking-code/vulnerability/wordpress-adwords-conversion-tracking-code-plugin-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve · Note