CVE-2025-69323
Published: 20 February 2026
Summary
CVE-2025-69323 is a high-severity Cross-site Scripting (CWE-79) vulnerability. Its CVSS base score is 7.1 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Spearphishing Link (T1566.002); ranked at the 13.9th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
Threat & Defense at a Glance
Threat & Defense Details
Likely Mitigating ControlsAI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Penetration testing submits XSS payloads to web applications, detecting cross-site scripting flaws for subsequent remediation.
Validates web inputs to reject script-related content that could produce XSS.
Output validation against expected content can reject or sanitize script content in generated web pages, reducing XSS exploitability.
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Reflected XSS enables delivery via crafted malicious links requiring user click (spearphishing link + user execution); directly matches description of network exploitation with UI:R.
NVD Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VeronaLabs Slimstat Analytics wp-slimstat allows Reflected XSS.This issue affects Slimstat Analytics: from n/a through <= 5.3.2.
Deeper analysisAI
CVE-2025-69323 is an Improper Neutralization of Input During Web Page Generation vulnerability, classified as Reflected Cross-site Scripting (XSS) under CWE-79, in the VeronaLabs Slimstat Analytics wp-slimstat WordPress plugin. This issue affects all versions from n/a through 5.3.2 inclusive. The vulnerability was published on 2026-02-20T16:22:19.530 and carries a CVSS v3.1 base score of 7.1 (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L).
Remote attackers can exploit this vulnerability over the network with low attack complexity and no required privileges, though user interaction such as clicking a malicious link is necessary. Successful exploitation changes scope to affect other components, enabling low-level impacts on confidentiality, integrity, and availability, such as potential theft of user session data or minor disruption within the victim's browser context.
The Patchstack advisory at https://patchstack.com/database/Wordpress/Plugin/wp-slimstat/vulnerability/wordpress-slimstat-analytics-plugin-5-3-2-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve documents this vulnerability in the wp-slimstat WordPress plugin version 5.3.2, providing details relevant to mitigation for affected deployments.
Details
- CWE(s)