Stored Cross-site Scripting Vulnerability in AM Events by Atte Moisio

CVE-2025-69006

What is CVE-2025-69006?

The AM Events plugin by Atte Moisio has a stored cross-site scripting (XSS) vulnerability that arises from improper neutralization of input during web page generation. This vulnerability can be exploited by attackers to inject malicious scripts that are stored on the server and subsequently executed in the context of the user's browser, potentially leading to data theft or session hijacking. The affected versions of the plugin extend up to 1.13.1, making it crucial for users to update and secure their systems against this threat.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References