CVE-2025-9030

Name of the Vulnerable Software and Affected Versions Majestic Before After Image plugin for WordPress versions prior to 2.0.2

Description The software is susceptible to Stored Cross-Site Scripting due to inadequate input sanitization and output escaping. This allows authenticated attackers with contributor-level access or higher to inject malicious web scripts into pages. These scripts will execute when a user accesses the compromised page. The vulnerable parameters are before label and after label.

Recommendations Update to version 2.0.2 or later.