CVE-2025-22325 WordPress Autocompleter plugin <= 1.3.5.2 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Nik Chankov Autocompleter allows Stored XSS.This issue affects Autocompleter: from n/a through 1.3.5.2...

CVE-2025-22325 WordPress Autocompleter plugin <= 1.3.5.2 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in nchankov Autocompleter autocompleter allows Stored XSS.This issue affects Autocompleter: from n/a through = 1.3.5.2...

CVE-2025-22325

CVE-2025-22325 describes a Cross-Site Request Forgery (CSRF) vulnerability in the Autocompleter plugin by Nik Chankov that permits a Stored XSS. Public records indicate the flaw affects Autocompleter versions from unknown up to 1.3.5.2. The root cause, as stated, is CSRF enabling Stored XSS, but ...