Cross-Site Request Forgery Vulnerability in EdwardBock Grid Plugin
CVE-2025-58657
What is CVE-2025-58657?
The EdwardBock Grid Plugin is susceptible to a Cross-Site Request Forgery (CSRF) vulnerability, which can lead to the exploitation of stored Cross-Site Scripting (XSS) attacks. This vulnerability can be exploited by sending unauthorized requests to the web application, enabling attackers to execute arbitrary scripts in users' browsers. This poses significant risks, particularly on sites using versions from n/a up to 2.3.1. Due diligence should be taken to patch or mitigate this vulnerability to safeguard sensitive user data and maintain the integrity of web applications.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Grid <= 2.3.1
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved