CVE-2025-48235

Name of the Vulnerable Software and Affected Versions: WP Image Mask versions through 3.1.2

Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows DOM-Based XSS. This means that an attacker could potentially inject malicious scripts into the website, affecting the DOM (Document Object Model) and thus impacting the website's functionality and security.

Recommendations: For WP Image Mask versions through 3.1.2, update to a version later than 3.1.2 to resolve the issue. At the moment, there is no information about other specific mitigation measures for this vulnerability.