Stored Cross-Site Scripting Vulnerability in Magic Edge – Lite Plugin for WordPress

CVE-2025-8391

What is CVE-2025-8391?

The Magic Edge – Lite plugin for WordPress is susceptible to Stored Cross-Site Scripting (XSS) attacks through the 'height' parameter. This liability arises from inadequate input sanitization and output escaping, allowing authenticated attackers with Contributor-level access or higher to inject arbitrary scripts. Consequently, these scripts execute whenever a user accesses an affected page, creating potential for data theft and unauthorized actions within the user’s session.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References