Cross-site Scripting Vulnerability in Think201 Data Dash by Think201
CVE-2025-23751

7.1HIGH

Key Information:

Vendor

WordPress
Status
Data Dash
Vendor
CVE Published:
14 February 2025

What is CVE-2025-23751?

An input validation flaw in Think201 Data Dash allows attackers to exploit a reflected Cross-site Scripting (XSS) vulnerability. This vulnerability enables malicious actors to inject harmful scripts into web pages generated by the application. Users visiting these compromised pages risk having their cookies stolen, sessions hijacked, or sensitive information exfiltrated. Ensuring proper sanitation of inputs is crucial to mitigate these risks and protect user data.

Affected Version(s)

Data Dash <= 1.2.3

References

https://patchstack.com/database/wordpress/plugin/data-das...
vdb-entry

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Le Ngoc Anh (Patchstack Alliance)
.