CVE-2025-31006

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in arete-it Activity Reactions For Buddypress activity-reactions-for-buddypress allows Reflected XSS.This issue affects Activity Reactions For Buddypress: from n/a through = 1.0.22...