Cross-Site Scripting Vulnerability in Scan External Links by Anshul Sojatia

CVE-2025-22583

What is CVE-2025-22583?

A reflected Cross-Site Scripting (XSS) vulnerability exists in the Scan External Links plugin developed by Anshul Sojatia. This vulnerability allows attackers to inject malicious scripts into web pages, which can then be executed in the context of the user's browser. If successfully exploited, this can lead to unauthorized access and manipulation of sensitive information. Websites using affected versions of this plugin, specifically up to version 1.0, are at risk. It is crucial for website administrators to take immediate action to patch this vulnerability and safeguard their sites against potential attacks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References