Cross-Site Scripting Vulnerability in MWW Disclaimer Buttons by Jennifer Moss

CVE-2025-60154

What is CVE-2025-60154?

A Cross-Site Scripting (XSS) vulnerability exists in the MWW Disclaimer Buttons plugin developed by Jennifer Moss. This flaw allows attackers to inject malicious scripts, which can be stored and executed in the user's browser when they visit affected pages. Exploitation of this vulnerability poses significant risks, including unauthorized access to sensitive user data and a compromised user experience. It affects all versions from n/a through 3.41, emphasizing the need for users to update their installations to safeguard against potential attacks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References