CVE-2025-46529 – StressFree Sites Business Contact Widget Stored Cross-Site Scripting Vulnerability

April 24, 2025

CVE ID : CVE-2025-46529

Published : April 24, 2025, 4:15 p.m. | 2 hours, 44 minutes ago

Description : Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability in StressFree Sites Business Contact Widget allows Stored XSS. This issue affects Business Contact Widget: from n/a through 2.7.0.

Severity: 5.9 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Source: Read More

Previous ArticleCVE-2025-46531 – Ankur Vishwakarma WP AVCL Automation Helper SSRF Vulnerability

Next Article CVE-2025-46530 – HuangYe WuDeng Hacklog Remote Attachment CSRF Stored XSS

Designing Better UX For Left-Handed People

This week in AI dev tools: Gemini 2.5 Flash-Lite, GitLab Duo Agent Platform beta, and more (July 25, 2025)

Tenable updates Vulnerability Priority Rating scoring method to flag fewer vulnerabilities as critical

Google adds updated workspace templates in Firebase Studio that leverage new Agent mode

I ran with the Apple Watch and Samsung Watch 8 – here’s the better AI coach

8 smart home gadgets that instantly upgraded my house (and why they work)

I tested Panasonic’s new affordable LED TV model – here’s my brutally honest buying advice

OpenAI teases imminent GPT-5 launch. Here’s what to expect

NativePHP Is Entering Its Next Phase

NativePHP Is Entering Its Next Phase

Medical Card Generator Android App Project Using SQLite

The details of TC39’s last meeting

Elden Ring Nightreign’s Patch 1.02 update next week is adding a feature we’ve all been waiting for since launch — and another I’ve been begging for, too

Elden Ring Nightreign’s Patch 1.02 update next week is adding a feature we’ve all been waiting for since launch — and another I’ve been begging for, too

The next time you look at Microsoft Copilot, it may look back — but who asked for this?

5 Open Source Apps You Can use for Seamless File Transfer Between Linux and Android

CVE-2025-46529 – StressFree Sites Business Contact Widget Stored Cross-Site Scripting Vulnerability

SharePoint under fire: ToolShell attacks hit organizations worldwide

Rogue CAPTCHAs: Look out for phony verification pages spreading malware

Overcoming Risks from Chinese GenAI Tool Usage

Microsoft June 2025 Patch Tuesday fixes exploited zero-day, 66 flaws

CVE-2025-6750 – HDF5 Heap-Based Buffer Overflow Vulnerability

Linux-lek geeft aanvaller roottoegang: “organisaties moeten meteen patchen”

I’m upgrading to these magnetic headphones and their incredibly fun sound, but they’re less accessible than what I had

It only took Call of Duty: Warzone going back in time to make the game so much better — to the point even I enjoy it now

Microsoft’s big AI update for Windows 11 is here – what’s new

CVE-2025-37998 – Openvswitch Netlink Attribute Parsing Vulnerability

CVE-2025-46529 – StressFree Sites Business Contact Widget Stored Cross-Site Scripting Vulnerability

Related Posts