Cross-Site Scripting Vulnerability in Ohio Extra Plugin by Colabrio
CVE-2025-64365
Currently unrated
What is CVE-2025-64365?
The Ohio Extra plugin by Colabrio is vulnerable to a Cross-Site Scripting (XSS) issue due to improper neutralization of user input during web page generation. This vulnerability allows attackers to inject malicious scripts that can execute in the context of the user's browser, potentially leading to data theft or unauthorized actions on behalf of the users. All versions of the Ohio Extra plugin up to and including 3.6.0 are affected, making it imperative for users to update to the latest version and implement necessary security measures.
Affected Version(s)
Ohio Extra <= n/a