Cross-site Scripting Vulnerability in Atakan Au's Automatically Hierarchic Categories Plugin

CVE-2025-50048

What is CVE-2025-50048?

An improper neutralization of input during web page generation has been identified in the Automatically Hierarchic Categories in Menu plugin by Atakan Au. This vulnerability allows for stored cross-site scripting (XSS) attacks, which could potentially enable an attacker to manipulate user sessions or inject harmful scripts into the web application's output. The affected versions range from n/a to 2.0.9, highlighting the importance of immediate patching and diligent security practices for users of this plugin.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References