CVE-2025-29014

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ZoomIt FoodMenu allows Reflected XSS. This issue affects FoodMenu: from n/a through 1.20...

CVE-2025-29014

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ZoomIt FoodMenu allows Reflected XSS. This issue affects FoodMenu: from n/a through 1.20...

CVE-2025-29014

CVE-2025-29014 corresponds to a Reflected XSS in WordPress plugin FoodMenu (

PT-2025-33158 · Unknown · Zoomit Foodmenu

Name of the Vulnerable Software and Affected Versions: ZoomIt FoodMenu versions n/a through 1.20 Description: ZoomIt FoodMenu is susceptible to a reflected cross-site scripting XSS issue due to improper neutralization of input during web page generation. Recommendations: Versions prior to 1.21 ar...