Stored Cross-Site Scripting Vulnerability in Terms Descriptions Plugin for WordPress

CVE-2025-6719

What is CVE-2025-6719?

The Terms Descriptions plugin for WordPress is susceptible to a stored cross-site scripting vulnerability due to inadequate input sanitization and output escaping. This flaw allows authenticated users with administrator-level privileges to inject malicious web scripts through admin settings. The injected scripts execute whenever users access a compromised page, primarily impacting multi-site installations and setups with disabled unfiltered_html. It's crucial for site administrators to assess their installations and apply necessary patches or updates to safeguard against potential exploits.

References