Cross-site Scripting Vulnerability in Beacon Lead Magnets by Syed Balkhi
CVE-2025-24637

7.1HIGH

Key Information:

Vendor

Syed Balkhi

Status
Beacon Lead Magnets And Lead Capture
Vendor
CVE Published:
17 April 2025

What is CVE-2025-24637?

A Cross-site Scripting (XSS) vulnerability exists in the Beacon Lead Magnets and Lead Capture plugin developed by Syed Balkhi. This flaw allows attackers to inject malicious scripts into web pages viewed by users, leading to potential exploitation via reflected XSS. The affected versions range from unspecified up to 1.5.7, making it crucial for users to update to secure their applications against this vulnerability.

Affected Version(s)

Beacon Lead Magnets and Lead Capture 0 <= 1.5.7

References

https://patchstack.com/database/Wordpress/Plugin/beacon-b...
vdb-entry

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

0xd4rk5id3 (Patchstack Alliance)
.