Cross-site Scripting Vulnerability in Toast Mobile Menu by Toast Plugins

CVE-2025-53238

What is CVE-2025-53238?

A Cross-site Scripting (XSS) vulnerability exists in the Toast Mobile Menu plugin developed by Toast Plugins. This vulnerability allows attackers to inject malicious scripts into web pages that are viewed by other users, potentially leading to unauthorized access and data theft. The issue affects versions of the Toast Mobile Menu up to and including 1.0.7. It is critical for users of this plugin to implement proper security measures and apply updates to protect against potential exploitation.

References