Cross-site Scripting Vulnerability in WP Ticket Customer Service Software by emarket-design

CVE-2025-60157

What is CVE-2025-60157?

An identified vulnerability in the WP Ticket Customer Service Software, developed by emarket-design, allows for improper neutralization of user input during web page generation, leading to a Stored XSS risk. This vulnerability can potentially enable attackers to execute arbitrary scripts in the context of user sessions, compromising sensitive information and the integrity of the application. Emarket-design users should ensure they are using secure versions of the software and apply any available patches to mitigate this risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References