CVE-2025-25123

Name of the Vulnerable Software and Affected Versions xdark Easy Related Posts versions n/a through 2.0.2

Description The issue is a Cross-Site Request Forgery (CSRF) vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web application, potentially leading to the execution of malicious scripts.

Recommendations For versions n/a through 2.0.2, update to a version later than 2.0.2 to resolve the issue. As a temporary workaround, consider implementing additional validation and verification for requests to prevent unintended actions. Restrict access to sensitive areas of the application to minimize the risk of exploitation.