CVE-2025-24810 — Rahe / Simple Image Sizes

CVE-2025-24810

Rahe / Simple Image Sizes PUBLISHED

Description (CNA)

Cross-site scripting vulnerability exists in Simple Image Sizes 3.2.3 and earlier. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is logging in to the product with the administrative privilege and accessing the settings screen.

Affected (CNA)

Vendor / product	Versions
Rahe / Simple Image Sizes	affected 3.2.3 and earlier

CWE

CWE-79

References

https://wordpress.org/plugins/simple-image-sizes/#developers
https://jvn.jp/en/jp/JVN88046370/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.