Reflected XSS Vulnerability in KNR Author List Widget by Yamna Tatheer

CVE-2025-22514

What is CVE-2025-22514?

A reflected Cross-site Scripting (XSS) vulnerability exists in the KNR Author List Widget developed by Yamna Tatheer. This security flaw arises from the improper neutralization of user input during web page generation, allowing attackers to execute malicious scripts in the context of users accessing affected versions. The vulnerability impacts KNR Author List Widget versions up to and including 3.1.1, potentially exposing users to a range of security risks. It is essential for users to update to the latest version of this plugin to mitigate the threat.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References