Cross-site Scripting Vulnerability in Skyword API Plugin by Skyword
CVE-2025-58703
What is CVE-2025-58703?
The Skyword API Plugin is susceptible to a Cross-site Scripting (XSS) vulnerability that allows an attacker to inject malicious scripts into web pages generated by the plugin. This Stored XSS issue affects versions up to 2.5.3 and could enable unauthorized parties to execute arbitrary scripts in the context of the user's browser, potentially compromising sensitive information. It is crucial for administrators using the Skyword API Plugin to apply protective measures against this vulnerability to maintain web application security.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Skyword API Plugin <= 2.5.3
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved