CVE-2025-32551

CVE-2025-32551 (Connector to CiviCRM with CiviMcRestFace) is a Reflected Cross-Site Scripting vulnerability disclosed by Wordfence. Affected product: Connector to CiviCRM with CiviMcRestFace. Vulnerable component: Web page generation input handling within the plugin. Root cause: improper neutrali...