CVE-2025-22327

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Olaf Lederer EO4WP fw-integration-for-emailoctopus allows Stored XSS.This issue affects EO4WP: from n/a through = 1.0.8.1...

CVE-2025-22327 WordPress EO4WP plugin <= 1.0.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Olaf Lederer EO4WP allows Stored XSS.This issue affects EO4WP: from n/a through 1.0.7...

CVE-2025-22327

CVE-2025-22327 is an EO4WP WordPress plugin stored XSS in EO4WP (WordPress plugin for EmailOctopus) affecting EO4WP versions up to 1.0.7. ENISA/Red Hat entries corroborate the vulnerability description; ENISA EUVD-2025-2727/EO4WP note indicates escalation via stored XSS, with EO4WP fixed in a lat...