Cross-site Scripting Vulnerability in WP Desk Flexible PDF Coupons

CVE-2025-22825

What is CVE-2025-22825?

The vulnerability involves the improper neutralization of input during the web page generation process, allowing for stored Cross-site Scripting (XSS) attacks in the WP Desk Flexible PDF Coupons plugin. Attackers can inject malicious scripts, which may be executed in the browsers of users who view the affected coupons. This poses significant risks, including unauthorized actions and data leakage, making it critical for site administrators to apply necessary updates to safeguard their websites.

References