Cross-site Scripting Vulnerability in WP Tesseract by Tattersoftware

CVE-2025-60176

What is CVE-2025-60176?

A Cross-site Scripting (XSS) vulnerability has been discovered in WP Tesseract, a plugin developed by Tattersoftware. This vulnerability arises from improper neutralization of input during web page generation, leading to potential stored XSS attacks. Attackers could exploit this flaw to inject malicious scripts into web pages viewed by users, compromising the security of websites utilizing WP Tesseract in versions up to and including 1.0.2. It is essential for site administrators to update their installations and implement appropriate security measures to mitigate this risk.

References