CVE-2025-15701

Name of the Vulnerable Software and Affected Versions Easy Social Icons versions prior to 4.0.3

Description Insufficient sanitization and escaping of certain settings before they are displayed on front-end pages allows high-privilege users, such as Administrators, to execute Stored Cross-Site Scripting (XSS) attacks. This occurs specifically when the unfiltered html capability is disabled, which is common in multisite network environments. Stored XSS is a type of attack where malicious scripts are permanently stored on the target server.

Recommendations Update Easy Social Icons to version 4.0.3 or later.