Cross-site Scripting Vulnerability in Events Manager - OpenStreetMaps by Stonehenge Creations

CVE-2025-58265

What is CVE-2025-58265?

A Cross-site Scripting (XSS) vulnerability exists in the Events Manager - OpenStreetMaps plugin by Stonehenge Creations, allowing an attacker to inject malicious scripts into web pages. This issue affects versions from n/a through 4.2.1, posing a risk of stored XSS that can lead to various forms of exploitation, including stealing user sessions and delivering harmful content. It is essential for users of this plugin to apply security updates and review their configurations to mitigate potential threats.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References