Security Advisory

CVE-2025-28988

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-06-27 11:52:41
Last updated 2026-05-12 00:25:36
Assigner Patchstack
State PUBLISHED

Description

Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) vulnerability in aharonyan WP Front User Submit / Front Editor front-editor allows Reflected XSS.This issue affects WP Front User Submit / Front Editor: from n/a through <= 4.9.3.