CVE-2025-49954

CVE-2025-49954 concerns the WordPress WP-Click-Tracker plugin (versions up to 0.7.3). The issue is a Reflected XSS caused by improper neutralization of input during web page generation. Affected component is the plugin’s web page creation logic; impact is potential execution of script in a user’s...