CVE-2025-24810
Cross-site scripting vulnerability exists in Simple Image Sizes 3.2.3 and earlier. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of …
Published: 2025-01-28 · CVSS: 4.8 · CVSS 3.0
Cross-site scripting vulnerability exists in Simple Image Sizes 3.2.3 and earlier. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is logging in to the product with the administrative privilege and accessing the settings screen.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7