PT-2025-54412 · Unknown · Janhenckens Dashboard Beacon

Published 2025-12-31 · Updated 2025-12-31 · CVE-2025-49337

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions janhenckens Dashboard Beacon versions through 1.2.0

Description The software contains a flaw related to improper input handling during web page generation, specifically a Stored Cross-site Scripting (XSS) issue. This allows for the injection of malicious scripts. The affected component is susceptible to exploitation through web pages. The vulnerability allows an attacker to inject malicious code that will be executed in the context of other users' browsers.

Recommendations Update to a version later than 1.2.0.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-49337

Affected Products

Janhenckens Dashboard Beacon

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-49337 · Security Note
• https://t.me/cveNotify/147370 · Telegram Post
• https://vdp.patchstack.com/database/wordpress/plugin/wp-dashboard-beacon/vulnerability/wordpress-dashboard-beacon-plugin-1-2-0-cross-site-scripting-xss-vulnerability?_s_id=cve · Note
• https://patchstack.com/database/wordpress/plugin/wp-dashboard-beacon/vulnerability/wordpress-dashboard-beacon-plugin-1-2-0-cross-site-scripting-xss-vulnerability?_s_id=cve · Note
• https://patchstack.com/database/Wordpress/Plugin/wp-dashboard-beacon/vulnerability/wordpress-dashboard-beacon-plugin-1-2-0-cross-site-scripting-xss-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/2006495406453064141 · Twitter Post