Reflected XSS Vulnerability in WP-tagMaker by Lich Wang

CVE-2025-22338

What is CVE-2025-22338?

A reflected XSS vulnerability exists in the WP-tagMaker plugin developed by Lich Wang, affecting versions from n/a to 0.2.2. This vulnerability allows attackers to inject malicious scripts into web pages, which can be executed in the context of a user’s browser, potentially leading to session hijacking, data theft, or another malicious activity. Proper input sanitization and output encoding measures are critical to protecting against such threats.

References