cleantalk
Vulnerabilities and Security Researches

Sessions, CVE-2025-57890

CVE, Research URL

CVE-2025-57890

Home page URL

Security reports for Sessions

Application

Sessions

Published on
Aug 22, 2025
Research Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pierre Lannoy Sessions allows Stored XSS. This issue affects Sessions: from n/a through 3.2.0.
Affected versions
Min -, max 3.2.1.
Status
vulnerable
Previous vulnerability researches
Greenshift – animation and page builder blocks (CVE-2025-3616) , Apr 29, 2025
Greenshift – animation and page builder blocks (CVE-2025-57884) , Aug 24, 2025
Greenshift – animation and page builder blocks (CVE-2022-4974) , May 07, 2025
Greenshift – animation and page builder blocks (CVE-2024-44005) , Sep 19, 2024
Greenshift – animation and page builder blocks (CVE-2024-11181) , Dec 12, 2024
New vulnerability
Simpler Checkout (CVE-2025-7642) , Aug 26, 2025
Sessions (CVE-2025-57890) , Aug 25, 2025
WP Admin Theme (CVE-2025-48325) , Aug 25, 2025
Site Offline Or Coming Soon Or Maintenance Mode (CVE-2025-48348) , Aug 25, 2025
Ni WooCommerce Customer Product Report (CVE-2025-7827) , Aug 25, 2025