Cross-site Scripting Vulnerability in Smart Notification by Smartiolabs

CVE-2025-39478

What is CVE-2025-39478?

A Cross-site Scripting (XSS) vulnerability has been identified in the Smart Notification plugin developed by Smartiolabs. This weakness allows attackers to inject malicious scripts into web pages that could be executed in the context of an authenticated user. The flaw exists in versions of the Smart Notification plugin ranging from n/a up to and including 10.3, leading to potential security breaches and data exposure. Website administrators are strongly advised to update the plugin to the latest version to mitigate these risks effectively.

References