CVE-2025-49266

creationtimestamp| type| source ---|---|--- 2025-06-17 16:18:16+00:00| seen| Telegram/PD7za3ZIQKuOVsDqz1Mapzzmy3mNuoA2PwtCv7Di4BOiE 2025-06-18 16:43:33+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18785...

CVE-2025-49266

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rustaurius Ultimate Reviews ultimate-reviews allows Reflected XSS.This issue affects Ultimate Reviews: from n/a through = 3.2.14...

CVE-2025-49266

CVE-2025-49266 is a Reflected XSS vulnerability in the WordPress plugin Ultimate Reviews, affecting versions up to 3.2.14. Root cause: improper input neutralization during web page generation. Impact: potential client-side script execution within affected sites. Remediation: upgrade to a version ...

WordPress Ultimate Reviews plugin <= 3.2.14 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Ryan Novotny in WordPress Plugin Ultimate Reviews versions = 3.2.14...