Cross-site Scripting in Easy Elements Hider by CWD Web Designer

CVE-2025-28971

What is CVE-2025-28971?

A Cross-site Scripting (XSS) vulnerability has been identified in the Easy Elements Hider plugin developed by CWD Web Designer. This vulnerability allows an attacker to inject malicious scripts into web pages that can be executed in the context of the user's browser. Affected versions include all versions prior to 2.0. Successful exploitation can lead to unauthorized access to sensitive information and potential hijacking of user sessions. It is crucial for users to update to the latest version of the plugin and implement appropriate security measures to mitigate this risk.

References