CVE-2025-25087
Published: 03 March 2025
Summary
CVE-2025-25087 is a high-severity Cross-site Scripting (CWE-79) vulnerability. Its CVSS base score is 7.1 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked in the top 42.4% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 SI-15 (Information Output Filtering) and SI-2 (Flaw Remediation).
Deeper analysis
CVE-2025-25087 is an Improper Neutralization of Input During Web Page Generation vulnerability, classified as Reflected Cross-Site Scripting (XSS, CWE-79), affecting the seekXL Snapr WordPress plugin (seekxl-snapr) developed by Tim. The issue impacts all versions from n/a through 2.0.6, as published on 2025-03-03. It carries a CVSS v3.1 base score of 7.1 (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L), indicating high severity due to network accessibility, low attack complexity, no required privileges, user interaction, and changed scope with low impacts across confidentiality, integrity, and availability.
Attackers can exploit this vulnerability remotely without authentication by crafting malicious payloads delivered via network requests, such as links in phishing emails or social engineering lures that trick users into interacting (e.g., visiting a malicious URL). Successful exploitation enables arbitrary JavaScript execution in the victim's browser context, potentially leading to session hijacking, data theft, or further site compromise, with the changed scope allowing impacts beyond the targeted user due to the plugin's web page generation role.
The Patchstack advisory at https://patchstack.com/database/Wordpress/Plugin/seekxl-snapr/vulnerability/wordpress-seekxl-snapr-plugin-2-0-6-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve details the vulnerability in the seekXL Snapr plugin version 2.0.6 and recommends mitigation through updating to a patched version beyond 2.0.6, as earlier versions remain vulnerable.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2025-5661
Vulnerability details
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tim seekXL Snapr seekxl-snapr allows Reflected XSS.This issue affects seekXL Snapr: from n/a through <= 2.0.6.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Reflected XSS in public-facing WordPress plugin directly enables exploitation of public-facing applications (T1190) via crafted network requests and facilitates arbitrary JavaScript execution in browser (T1059.007) for impacts like session hijacking.
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Directly addresses reflected XSS by requiring filtering and encoding of information outputs during web page generation to neutralize malicious scripts.
Validates inputs at system boundaries to reject or sanitize malicious payloads before they are reflected in web pages.
Ensures timely identification, reporting, and remediation of the specific flaw in seekXL Snapr plugin versions up to 2.0.6.