cleantalk
Vulnerabilities and Security Researches

Include Me, CVE-2025-58983

CVE, Research URL

CVE-2025-58983

Home page URL

Security reports for Include Me

Application

Include Me

Published on
Sep 09, 2025
Research Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Stefano Lissa Include Me allows Stored XSS. This issue affects Include Me: from n/a through 1.3.2.
Affected versions
Min -, max 1.3.3.
Status
vulnerable
Previous vulnerability researches
Popup, Optin Form & Email Newsletters for Mailchimp, HubSpot, AWeber – MailOptin (CVE-2025-58596) , Sep 05, 2025
Popup, Optin Form & Email Newsletters for Mailchimp, HubSpot, AWeber – MailOptin (CVE-2022-36340) , Jun 07, 2024
Popup, Optin Form & Email Newsletters for Mailchimp, HubSpot, AWeber – MailOptin (CVE-2023-23980) , Jun 07, 2024
Popup, Optin Form & Email Newsletters for Mailchimp, HubSpot, AWeber – MailOptin (CVE-2024-8628) , Sep 25, 2024
New vulnerability
Redis Object Cache , Sep 17, 2025
Zakra (CVE-2025-8595) , Sep 15, 2025
PDF Embedder , Sep 11, 2025
Pixeline's Email Protector (CVE-2025-58982) , Sep 11, 2025
Include Me (CVE-2025-58983) , Sep 11, 2025