CVE-2025-24810 MEDIUM

CVE-2025-24810

Vendor Rahe
Product Simple Image Sizes
Weakness CWE-79 · XSS
Published January 28, 2025
Last update January 28, 2025

CVSS base score

4.8/10
Attack vector Network
Attack complexity Low
Privileges required High
User interaction Required
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

What the vulnerability does

01Description

Cross-site scripting vulnerability exists in Simple Image Sizes 3.2.3 and earlier. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is logging in to the product with the administrative privilege and accessing the settings screen.

Key dates

02Disclosure timeline

January 28, 2025 CVE published
January 28, 2025 Record updated