CVE-2025-23489

CVE-2025-23489 : Reflected XSS in the WP-Announcements plugin for WordPress (affected: WP-Announcements up to version 1.8). Root cause: improper neutralization of input during web page generation. Impact: potential to run arbitrary script in a victim’s browser. CVSS v3.1 base score 7.1 (HIGH). Co...

PT-2025-4902 · WordPress · Wp Announcement

Name of the Vulnerable Software and Affected Versions: WP-Announcements versions 1.8 and earlier Description: The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting'. This allows for Reflected XSS. Recommendations: For...

WordPress WP-Announcements plugin <= 1.8 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by SOPROBRO in WordPress Plugin WP-Announcements versions = 1.8...