Cross-Site Scripting Vulnerability in Wired Impact Volunteer Management

CVE-2025-26980

What is CVE-2025-26980?

The Wired Impact Volunteer Management plugin suffers from a Cross-Site Scripting (XSS) vulnerability due to improper handling of user input during web page generation. This flaw enables attackers to inject malicious scripts, which can then be executed in the context of the user’s browser. As a result, sensitive data may be exposed, or malicious actions can be performed on behalf of the users. All installations prior to version 2.5 are at risk. It is crucial for users and administrators to apply updates and implement additional security measures to mitigate potential exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References