Stored XSS Vulnerability in Really Simple Under Construction Page by Jonas Hjalmarsson

CVE-2025-47593

What is CVE-2025-47593?

The Really Simple Under Construction Page plugin, developed by Jonas Hjalmarsson, contains a vulnerability that allows for Stored Cross-site Scripting (XSS). This vulnerability stems from improper neutralization of user input during the web page generation process. An attacker could exploit this flaw to inject malicious scripts, which may be executed in the context of the user's browser, leading to unauthorized actions or data exposure. The affected versions range from n/a through 1.4.6, emphasizing the need for users to implement necessary security measures or updates to safeguard their WordPress sites.

References