Stored XSS Vulnerability in Map Categories to Pages by Amit Verma

CVE-2025-60146

What is CVE-2025-60146?

A stored Cross-site Scripting (XSS) vulnerability exists in the Map Categories to Pages plugin developed by Amit Verma. This flaw allows attackers to inject malicious scripts into web pages, potentially affecting users who visit the compromised pages. Specifically, versions from n/a up to 1.3.2 of the plugin are vulnerable, posing a significant risk to website security. It is crucial for users of affected versions to implement security measures or apply patches to mitigate this threat.

References