CVE-2025-47668

CVE-2025-47668 affects WordPress plugin CookieCode (versions n/a through 2.4.4). The issue is Stored XSS caused by improper input neutralization during web page generation. CVSS 3.1 vector: AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L, base score 5.9 (Medium). Public references (Patchstack, NVD, Red Hat, ...