CVE-2025-62110

CVE-2025-62110 is a stored cross-site scripting (XSS) vulnerability in Rescue Themes Rescue Shortcodes plugin version 3.3 and earlier that allows improper neutralization of user input during web page generation. The vulnerability enables attackers to inject malicious scripts that persist in the application and execute in users' browsers when they view affected pages. The vulnerability carries a CVSS severity rating of 6.5 (MEDIUM) with a network-based attack vector requiring low complexity and user login privileges. Exploitation also requires user interaction, such as clicking a malicious link, and impacts confidentiality, integrity, and availability across security scope boundaries. The FAUCET risk score of 35.0 out of 100 indicates moderate risk relative to other vulnerabilities. Currently, there is no evidence of active exploitation in the wild, as the vulnerability is not listed on the Known Exploited Vulnerabilities (KEV) catalog and is inactive on hot vulnerability tracking lists. The low EPSS score of 0.00033 suggests minimal probability of exploitation in real-world conditions at this time. However, organizations using affected versions should prioritize patching to versions beyond 3.3 to mitigate potential risks before exploit code becomes publicly available.