CVE-2025-22358

Name of the Vulnerable Software and Affected Versions Marcon Simone Wp advertising management versions n/a through 1.0.3

Description The issue is related to improper neutralization of input during web page generation, which allows for Cross-site Scripting (XSS), specifically Reflected XSS. This means an attacker can inject malicious scripts into the website, potentially affecting users who visit the compromised page.

Recommendations For versions n/a through 1.0.3, update to a version later than 1.0.3 to resolve the issue. As a temporary workaround, consider restricting access to sensitive areas of the website to minimize the risk of exploitation. Avoid using user-inputted data in API endpoints until the issue is resolved. At the moment, there is no information about additional mitigation measures.