Cross-site Scripting Flaw in WP CodeUs Ultimate Client Dash
CVE-2025-58811

5.9MEDIUM

Key Information:

Vendor

WordPress
Status
Ultimate Client Dash
Vendor
CVE Published:
5 September 2025

What is CVE-2025-58811?

A stored Cross-site Scripting (XSS) vulnerability has been identified in WP CodeUs Ultimate Client Dash, allowing malicious users to inject and execute arbitrary scripts in the context of affected web pages. This issue specifically impacts versions from n/a through 4.6, posing risks of data theft and user impersonation.

Affected Version(s)

Ultimate Client Dash <= 4.6

References

https://patchstack.com/database/wordpress/plugin/ulimate-...
vdb-entry

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Que Thanh Tuan - Blue Rock (Patchstack Alliance)
.