Cross-Site Scripting Vulnerability in Themify Audio Dock by Themify

CVE-2025-49392

What is CVE-2025-49392?

The Themify Audio Dock plugin is susceptible to a Cross-Site Scripting (XSS) vulnerability that allows attackers to inject malicious scripts. This stored XSS flaw can be exploited when the affected web application generates web pages without properly neutralizing user inputs. These vulnerabilities can lead to unauthorized access, session hijacking, and the potential compromise of sensitive user information.

References