Cross-Site Scripting Vulnerability in Simple Sticky Footer by Sandor Kovacs
CVE-2025-50019

5.9MEDIUM

Key Information:

Vendor

WordPress
Status
Simple Sticky Footer
Vendor
CVE Published:
20 June 2025

What is CVE-2025-50019?

The Simple Sticky Footer plugin by Sandor Kovacs is susceptible to a Cross-Site Scripting (XSS) vulnerability, which allows attackers to inject malicious scripts into web pages. This can lead to stored XSS attacks, putting users at risk of data theft and session hijacking. The affected versions range from n/a through 1.3.5, highlighting the importance for users to ensure their plugins are updated to mitigate potential exploits.

Affected Version(s)

Simple Sticky Footer <= 1.3.5

References

https://patchstack.com/database/wordpress/plugin/simple-s...
vdb-entry

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Nabil Irawan (Patchstack Alliance)
.