CVE-2025-24558

CVE-2025-24558 is a noted Reflected Cross‑Site Scripting vulnerability in the WordPress plugin CRM Perks (versions <= 1.1.5). The root cause is improper neutralization of input during web page generation , allowing an attacker to trigger a reflected XSS. Affected product: WordPress CRM Perks p...