Reflected XSS Vulnerability in Tomáš Groulík's Intro Tour Tutorial DeepPresentation Plugin

CVE-2025-24566

What is CVE-2025-24566?

A reflected cross-site scripting (XSS) vulnerability exists in Tomáš Groulík's Intro Tour Tutorial DeepPresentation plugin, allowing attackers to inject malicious scripts into web pages. This can lead to the execution of unauthorized commands in the user’s browser, compromising sensitive information and session tokens. The vulnerability affects all versions up to 6.5.2, emphasizing the need for immediate mitigation and updates to the plugin for enhanced security.

References