CVE-2025-57981

Name of the Vulnerable Software and Affected Versions catchsquare WP Social Widget versions through 2.3.1

Description The WP Social Widget software contains a flaw related to improper input handling during web page generation, which can lead to Cross-site Scripting (XSS). This allows for the injection of malicious scripts. The issue is a Stored XSS, meaning the malicious script is persistently stored and executed when a user views the affected page.

Recommendations Update catchsquare WP Social Widget to a version later than 2.3.1.