Cross-site Scripting Vulnerability in Google+ Comments Plugin by Alex Moss

CVE-2025-60186

What is CVE-2025-60186?

The Google+ Comments plugin developed by Alex Moss is vulnerable to a Cross-site Scripting (XSS) issue due to improper input handling during webpage generation. This vulnerability allows attackers to inject malicious scripts that can be stored and executed later, potentially compromising user data and overall site security. The issue affects all versions of the plugin up to and including version 1.0, making it critical for users and administrators to address this risk to safeguard their web applications.

References