Cross-Site Scripting Vulnerability in WP-EXPERTS.IN Sales Count Manager for WooCommerce

CVE-2025-57904

What is CVE-2025-57904?

The Sales Count Manager for WooCommerce plugin by WP-EXPERTS.IN is exposed to an XSS vulnerability due to improper input neutralization during web page generation. This flaw allows attackers to inject malicious scripts into web pages viewed by users, potentially leading to unauthorized actions or data theft. It affects versions up to 2.5, making it critical for users to update and secure their installations to mitigate the risk of exploitation.

References