CVE-2026-25353

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in skygroup Nooni nooni allows Reflected XSS.This issue affects Nooni: from n/a through 1.5.1...

CVE-2026-25353

CVE-2026-25353 is a Reflected XSS vulnerability in the Nooni WordPress theme (Nooni). The issue is described as improper neutralization of input during web page generation and is reported as affecting Nooni versions from n/a up to (but not including) 1.5.1. The connected Wordfence document confir...