Cross-site Scripting Vulnerability in WeShare Buttons by NIKITAS GEORGOPOULOS

CVE-2025-60135

What is CVE-2025-60135?

The WeShare Buttons plugin developed by NIKITAS GEORGOPOULOS has a Cross-site Scripting (XSS) vulnerability due to inadequate input sanitization during web page generation. This flaw allows attackers to inject malicious scripts that can be executed in the context of other users interacting with the affected plugin. It primarily affects users of versions up to 13.0.0, putting them at risk for data theft and unauthorized actions if exploited. Proper input validation and sanitization measures are essential to mitigate the risks associated with this vulnerability.

References