CVE-2025-23585

CVE-2025-23585 affects WordPress Goo.gl Url Shorter plugin (versions up to 1.0.1). The underlying issue is improper input neutralization in web page generation, enabling Reflected Cross‑Site Scripting (XSS). CVSSv3.1 base score 7.1 (HIGH) with network attack vector, low attack complexity, no priv...

CVE-2025-23585: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CantonBolo Goo.gl Url Shorter googl-url-shorter allows Reflected XSS.This issue affects Goo.gl Url Shorter: from n/a through = 1.0.1...

PT-2025-9382

Name of the Vulnerable Software and Affected Versions CantonBolo Goo.gl Url Shorter versions n/a through 1.0.1 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS attacks. Recommendation...

WordPress Goo.gl Url Shorter plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin Goo.gl Url Shorter versions = 1.0.1...