Cross-site Scripting Vulnerability in Loopus WP Virtual Assistant

CVE-2025-22725

What is CVE-2025-22725?

The Loopus WP Virtual Assistant plugin is prone to a Stored Cross-site Scripting (XSS) vulnerability, which can allow attackers to inject malicious scripts into web pages generated by the application. This issue arises from the improper handling of user inputs, potentially leading to unauthorized access to sensitive data or the execution of arbitrary scripts in users' browsers. It affects installations of the WP Virtual Assistant plugin from its initial version up to version 3.0, making it crucial for users to update to the latest version to mitigate the risks associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References