cleantalk
Vulnerabilities and Security Researches

Customer Service Software & Support Ticket System, CVE-2025-58915

CVE, Research URL

CVE-2025-58915

Home page URL

Security reports for Customer Service Software & Support Ticket System

Application

Customer Service Software & Support Ticket System

Published on
Sep 23, 2025
Research Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Emarket-design YouTube Showcase youtube-showcase allows Stored XSS.This issue affects YouTube Showcase: from n/a through 3.5.0.
Affected versions
max 6.0.1.
Status
vulnerable
Previous vulnerability researches
Team Member Showcase Staff List Plugin – Employee Spotlight (CVE-2025-53583) , Sep 01, 2025
Team Member Showcase Staff List Plugin – Employee Spotlight (CVE-2025-12090) , Nov 11, 2025
Team Member Showcase Staff List Plugin – Employee Spotlight (CVE-2025-13403) , Jan 11, 2026
Team Member Showcase Staff List Plugin – Employee Spotlight (CVE-2025-58915) , Oct 11, 2025
New vulnerability
Pure WC Variation Swatches (CVE-2025-12820) , Jan 11, 2026
WP Scraper (CVE-2025-62088) , Jan 11, 2026
Chat Widget: Customer Support Button with SMS Call Button, Click to Chat Messenger Live Chat Support Chat Button – Bit As (CVE-2025-68596) , Jan 11, 2026
Free Follow-Up Emails & Marketing Automation for WooCommerce – ShopMagic (CVE-2025-69093) , Jan 11, 2026
SALESmanago (CVE-2025-68571) , Jan 11, 2026