Cross-Site Scripting Vulnerability in Dynamic User Directory by Sarah Giles

CVE-2025-62982

What is CVE-2025-62982?

The Dynamic User Directory plugin by Sarah Giles has a serious Cross-Site Scripting (XSS) vulnerability that allows attackers to execute malicious scripts through improperly sanitized input during web page generation. This flaw affects versions prior to and including 2.3, enabling stored XSS attacks that can compromise user data and website integrity. It is crucial for users of this plugin to update to the latest version and ensure proper web security measures are in place.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References