Stored Cross-Site Scripting in Mang Board Plugin for WordPress

CVE-2025-3435

What is CVE-2025-3435?

The Mang Board WP plugin for WordPress is susceptible to Stored Cross-Site Scripting vulnerabilities. This issue arises from inadequate input sanitization and output escaping within the board_header and board_footer parameters, allowing authenticated attackers with administrator-level access to inject malicious scripts. This can compromise user experience and security, as malicious content will execute whenever a user accesses a compromised page. Notably, this vulnerability primarily affects multi-site installations and those where the unfiltered_html option has been disabled.

References