DOM-Based XSS in CubeWP Framework by Emraan Cheema

CVE-2025-49882

What is CVE-2025-49882?

A vulnerability in CubeWP Framework by Emraan Cheema allows attackers to exploit improper neutralization of input during web page generation, resulting in DOM-based cross-site scripting (XSS). This type of vulnerability can permit malicious actors to execute arbitrary JavaScript in the context of a user's browser, potentially leading to data theft, session hijacking, and other security breaches. The affected versions range from n/a to 1.1.23, necessitating immediate attention and remediation from users of the framework.

References