CVE-2025-23585

CVE-2025-23585 affects WordPress Goo.gl Url Shorter plugin (versions up to 1.0.1). The underlying issue is improper input neutralization in web page generation, enabling Reflected Cross‑Site Scripting (XSS). CVSSv3.1 base score 7.1 (HIGH) with network attack vector, low attack complexity, no priv...

WordPress Goo.gl Url Shorter plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin Goo.gl Url Shorter versions = 1.0.1...