Stored Cross-Site Scripting in Majestic Before After Image Plugin for WordPress
CVE-2025-9030
5.4MEDIUM
What is CVE-2025-9030?
The Majestic Before After Image plugin for WordPress contains a vulnerability that allows authenticated users with contributor-level access or higher to exploit insufficient input sanitization and output escaping linked to the 'before_label' and 'after_label' parameters. This can lead to the injection of arbitrary web scripts, compromising the security of pages viewed by other users.
Affected Version(s)
Majestic Before After Image * <= 2.0.2