CVE-2025-68859
BaseFortify
Publication date: 2026-01-22
Last updated on: 2026-01-28
Assigner: Patchstack
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| syntax_highlighter_compress | syntax_highlighter_compress | From 3.0.0 (inc) to 3.0.83.3 (inc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-79 | The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
CVE-2025-68859 is a medium severity Cross Site Scripting (XSS) vulnerability in the WordPress Syntax Highlighter Compress Plugin (versions up to 3.0.83.3). It allows an attacker to inject malicious scripts, such as redirects or advertisements, into a website. These scripts execute when visitors access the compromised pages. Exploitation requires user interaction, like clicking a malicious link or visiting a crafted page, but no authentication is needed. [1]
How can this vulnerability impact me? :
This vulnerability can lead to attackers injecting malicious scripts into your website, which can execute in the browsers of your visitors. This can result in unauthorized redirects, display of unwanted advertisements, theft of user data, or other malicious actions. It poses a moderate risk (CVSS score 7.1) and can compromise the security and trustworthiness of your website. [1]
How can this vulnerability be detected on my network or system? Can you suggest some commands?
Detection of this vulnerability involves monitoring for suspicious input or script injection attempts targeting the Syntax Highlighter Compress plugin on your WordPress site. Since this is a reflected XSS vulnerability, you can look for unusual URL parameters or form inputs that include script tags or suspicious payloads. Specific commands are not provided in the resources, but you can use web application security scanners or manual testing tools like OWASP ZAP or Burp Suite to test for reflected XSS by sending crafted requests to pages using the vulnerable plugin. Additionally, monitoring web server logs for unusual query strings or payloads containing <script> tags may help detect exploitation attempts. [1]
What immediate steps should I take to mitigate this vulnerability?
Immediate mitigation steps include applying the mitigation rule issued by Patchstack to block attacks targeting this vulnerability until an official patch is released. Since no official fixed plugin version is available as of the publication date, users should promptly implement this mitigation to protect their websites. Additionally, restricting user input, disabling the vulnerable plugin if possible, or limiting access to trusted users may reduce risk. Monitoring for suspicious activity and educating users about the risk of clicking untrusted links can also help mitigate exploitation. [1]