6.5
CVSSv3

CVE-2025-25085

CVSSv4: NA | CVSSv3: 6.5 | CVSSv2: NA | VMScore: 750 | EPSS: 0.00046 | KEV: Not Included
Published: 07/02/2025 Updated: 07/02/2025

Vulnerability Summary

Stored Cross-Site Scripting Vulnerability in WP SimpleWeather Plugin 0.2.5

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in matt_mcbrien WP SimpleWeather allows Stored XSS. This issue affects WP SimpleWeather: from n/a up to and including 0.2.5.

Vulnerable Product Search on Vulmon Subscribe to Product

matt mcbrien wp simpleweather