CVE-2025-27288

CVE-2025-27288 : WordPress WordPress File Icons plugin (versions n/a–2.1) is affected by a Reflected XSS due to improper input neutralization during page generation. CVSS v3.1 base score 7.1 (HIGH); vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L. Affected product: File Icons plugin for Word...

WordPress File Icons Plugin <= 2.1 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by 0xd4rk5id3 in WordPress Plugin File Icons versions = 2.1...