CVE-2025-49392
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themifyme Themify Audio Dock themify-audio-dock allows Stored XSS.This issue affects Themify Audio Dock: from n/a through <= 2.0.5.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Themify Audio Dock plugin <=2.0.5 has a Stored XSS vulnerability allowing attackers to inject malicious scripts via improperly neutralized input.
The Themify Audio Dock WordPress plugin (versions 2.0.5 and earlier) fails to properly sanitize user input during page generation, leading to a stored cross-site scripting (XSS) vulnerability. This means that input provided by an attacker is not neutralized before being stored and later displayed to other users, enabling script injection [1].
AI Insight generated on May 19, 2026. Synthesized from this CVE's description and the cited reference URLs; citations are validated against the source bundle.
Affected products
1- Range: <=2.0.5
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1News mentions
0No linked articles in our index yet.