CVE-2025-1798

Publication date

2025-03-25 06:00:14

Family

WPScan

State

PUBLISHED

Description

The does not sanitise and escape some parameters when outputting them back in a page, allowing unauthenticated users the ability to perform stored Cross-Site Scripting attacks.