DOM-Based XSS Exposure in SKT Skill Bar by Sonal Sinha

CVE-2025-66090

What is CVE-2025-66090?

A vulnerability exists in the SKT Skill Bar plugin developed by Sonal Sinha, characterized by an improper neutralization of input during web page generation. This flaw allows for DOM-based Cross-site Scripting (XSS), enabling attackers to inject malicious scripts into webpages viewed by users. As a result, sensitive user data could be compromised, and site integrity might be at risk. Versions up to and including 2.5 are impacted, necessitating prompt action to mitigate potential exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References