Cross-site Scripting Vulnerability in Comment Form WP - Customize Default Comment Form

CVE-2025-58825

What is CVE-2025-58825?

The Comment Form WP - Customize Default Comment Form is susceptible to a Cross-site Scripting (XSS) vulnerability due to improper input neutralization during web page generation. This security flaw allows attackers to inject malicious scripts, which can be executed in the context of users accessing affected web pages. The vulnerability affects all versions from n/a to 2.0.0, posing significant risks for users interacting with the comment forms. It is crucial for site administrators to assess their installations and apply necessary updates to mitigate potential exploitation.

References