Vulnerability · Published Mar 28, 2025 · Assigned by Patchstack
CVE-2025-22501WordPress Improve My City plugin <= 1.6 - Cross Site Scripting (XSS) vulnerability
High 7.1
In plain English
A high-severity security flaw in Improve My City from Improve My City. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 15% of all known vulnerabilities).
Severity (CVSS 3.1)7.1High
Exploit odds (30 days)0.2%top 84.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Improve My City Improve My City improve-my-city allows Reflected XSS.This issue affects Improve My City: from n/a through <= 1.6.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Improve My City | Improve My City | 0 – through 1.6 |
Weakness: CWE-80 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L