Cross-Site Scripting Vulnerability in MWW Disclaimer Buttons by Jennifer Moss

CVE-2025-60154

What is CVE-2025-60154?

A Cross-Site Scripting (XSS) vulnerability exists in the MWW Disclaimer Buttons plugin developed by Jennifer Moss. This flaw allows attackers to inject malicious scripts, which can be stored and executed in the user's browser when they visit affected pages. Exploitation of this vulnerability poses significant risks, including unauthorized access to sensitive user data and a compromised user experience. It affects all versions from n/a through 3.41, emphasizing the need for users to update their installations to safeguard against potential attacks.

References