CVE-2025-48322

CVE-2025-48322 – WordPress Statify Widget stored XSS Affected: Statify Widget (WordPress plugin) up to and including version 1.4.6.Root cause: Improper neutralization of input during web page generation, enabling stored XSS.Impact: Stored Cross-Site Scripting vulnerability; exact user impact depe...

CVE-2025-48322: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Finn Dohrn Statify Widget statify-widget allows Stored XSS.This issue affects Statify Widget: from n/a through = 1.4.6...