Cross-Site Scripting Vulnerability in Rustaurius Front End Users
CVE-2025-58235

6.5MEDIUM

Key Information:

Vendor

WordPress
Status
Front End Users
Vendor
CVE Published:
22 September 2025

What is CVE-2025-58235?

A Cross-Site Scripting (XSS) vulnerability exists in Rustaurius Front End Users, allowing attackers to execute arbitrary script code in the context of a user's browser. This issue can be exploited through improper handling of user inputs during web page generation, leading to potential data theft or session hijacking. This vulnerability affects versions up to 3.2.33, necessitating immediate attention to ensure proper input validation and output encoding to mitigate risks.

Affected Version(s)

Front End Users <= 3.2.33

References

https://patchstack.com/database/wordpress/plugin/front-en...
vdb-entry

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

theviper17 (Patchstack Alliance)
JSON
.