Cross-site Scripting Vulnerability in Comment Form WP - Customize Default Comment Form

CVE-2025-58825

What is CVE-2025-58825?

The Comment Form WP - Customize Default Comment Form is susceptible to a Cross-site Scripting (XSS) vulnerability due to improper input neutralization during web page generation. This security flaw allows attackers to inject malicious scripts, which can be executed in the context of users accessing affected web pages. The vulnerability affects all versions from n/a to 2.0.0, posing significant risks for users interacting with the comment forms. It is crucial for site administrators to assess their installations and apply necessary updates to mitigate potential exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References