CVE-2025-23899 WordPress Bookalet plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bookalet Bookalet bookalet allows Stored XSS.This issue affects Bookalet: from n/a through = 1.0.3...

CVE-2025-23899

Technical details about CVE-2025-23899 (Bookalet) are not publicly provided in the connected documents. The initial description notes Stored XSS affecting Bookalet up to 1.0.3 but lacks explicit exploit, affected versions beyond that, or a remediation. Monitor for updates.

WordPress Bookalet plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO in WordPress Plugin Bookalet versions = 1.0.3...