PT-2025-54401 · Unknown · Omar Mohamed Mohamoud Live Tv

Mika · Published 2025-12-31 · Updated 2025-12-31 · CVE-2025-23608

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Omar Mohamed Mohamoud LIVE TV versions through 1.2

Description The software contains a flaw related to improper input handling during web page generation, specifically a Reflected Cross-site Scripting issue. This allows for the execution of malicious scripts through manipulated web requests. The affected component is susceptible to exploitation via crafted input.

Recommendations Versions prior to 1.3 are affected.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-23608

Affected Products

Omar Mohamed Mohamoud Live Tv

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-23608 · Security Note
• https://t.me/cveNotify/147369 · Telegram Post
• https://patchstack.com/database/wordpress/plugin/live-tv/vulnerability/wordpress-live-tv-plugin-1-2-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve · Note
• https://patchstack.com/database/Wordpress/Plugin/live-tv/vulnerability/wordpress-live-tv-plugin-1-2-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve · Note
• https://vdp.patchstack.com/database/wordpress/plugin/live-tv/vulnerability/wordpress-live-tv-plugin-1-2-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/2006495409728860233 · Twitter Post