CVE-2025-22362

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Daniel Bakovic WPAchievements Free wpachievements-free allows Stored XSS.This issue affects WPAchievements Free: from n/a through = 1.2.0...

CVE-2025-22362

CVE-2025-22362 is a stored XSS in WPAchievements Free (WordPress plugin) affecting WPAchievements Free up to version 1.2.0. The vulnerability is described as Improper Neutralization of Input During Web Page Generation and is confirmed via Red Hat’s CVE entry (RH: CVE-2025-22362). No exploit detai...