CVE-2025-39382

Name of the Vulnerable Software and Affected Versions ACF: Google Font Selector versions 3.0.1 and earlier

Description The issue is related to improper neutralization of input during web page generation, which allows for reflected cross-site scripting (XSS). This can be exploited through the ACF: Google Font Selector, enabling attackers to inject malicious scripts into web pages.

Recommendations For ACF: Google Font Selector versions 3.0.1 and earlier, update to a version that contains a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.