Cross-site Scripting Vulnerability in WP Ticket Customer Service Software by emarket-design

CVE-2025-60157

What is CVE-2025-60157?

An identified vulnerability in the WP Ticket Customer Service Software, developed by emarket-design, allows for improper neutralization of user input during web page generation, leading to a Stored XSS risk. This vulnerability can potentially enable attackers to execute arbitrary scripts in the context of user sessions, compromising sensitive information and the integrity of the application. Emarket-design users should ensure they are using secure versions of the software and apply any available patches to mitigate this risk.

References