Cross-Site Scripting Vulnerability in CMSJunkie WP-BusinessDirectory Plugin

CVE-2025-68887

What is CVE-2025-68887?

The WP-BusinessDirectory plugin by CMSJunkie is susceptible to a Cross-Site Scripting (XSS) vulnerability, which may allow attackers to inject malicious scripts into web pages viewed by users. This reflected XSS issue can be exploited through unsanitized user input passed in URLs, thus compromising site integrity and potentially leading to unauthorized actions on behalf of authentic users. Users of affected plugin versions should apply the necessary security updates to mitigate this risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References