CVE-2025-28917

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in crazyloong Custom Smilies custom-smilies-se allows Stored XSS.This issue affects Custom Smilies: from n/a through = 2.9.2...

CVE-2025-28917

CVE-2025-28917 : WordPress/Plugin Custom Smilies vulnerability with cross-site scripting (Stored XSS) due to improper neutralization of input during web page generation. Affected: Custom Smilies versions up to 2.9.2 (WordPress plugin). Connected documents confirm this CVE ID corresponds to the XS...

PT-2025-12961

Name of the Vulnerable Software and Affected Versions NotFound Custom Smilies versions 2.9.2 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...