3 matches found
CVE-2025-48251
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPFactory Additional Custom Emails & Recipients for WooCommerce custom-emails-for-woocommerce allows Stored XSS.This issue affects Additional Custom Emails & Recipients for WooCommerce: from n/a...
CVE-2025-48251 WordPress Additional Custom Emails & Recipients for WooCommerce <= 3.5.1 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPFactory Additional Custom Emails & Recipients for WooCommerce allows Stored XSS. This issue affects Additional Custom Emails & Recipients for WooCommerce: from n/a through 3.5.1...
CVE-2025-48251
CVE-2025-48251 – WPFactory Additional Custom Emails & Recipients for WooCommerce exposes a stored XSS via improper input neutralization during web page generation. Affected: WordPress plugin < Additional Custom Emails & Recipients for WooCommerce