Cross-site Scripting Vulnerability in SS Font Awesome Icon by Shiful H
CVE-2025-58837

6.5MEDIUM

Key Information:

Vendor

WordPress
Status
Ss Font Awesome Icon
Vendor
CVE Published:
5 September 2025

What is CVE-2025-58837?

The SS Font Awesome Icon plugin by Shiful H is susceptible to a Cross-site Scripting (XSS) vulnerability, which allows attackers to inject malicious scripts through improper input neutralization during web page generation. This vulnerability affects all versions of the plugin up to 4.1.3. Exploitation of this flaw could lead to unauthorized actions being performed by users, potentially compromising user data and site integrity.

Affected Version(s)

SS Font Awesome Icon <= 4.1.3

References

https://patchstack.com/database/wordpress/plugin/ss-font-...
vdb-entry

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Mika (Patchstack Alliance)
.