CVE-2025-22742

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in falldeaf WP ViewSTL wp-viewstl allows DOM-Based XSS.This issue affects WP ViewSTL: from n/a through = 1.0...

CVE-2025-22742

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in falldeaf WP ViewSTL wp-viewstl allows DOM-Based XSS.This issue affects WP ViewSTL: from n/a through = 1.0...

CVE-2025-22742

creationtimestamp| type| source ---|---|--- 2025-01-15 16:10:00+00:00| seen| https://infosec.exchange/users/cve/statuses/113833240159105478 2025-01-15 16:16:30+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfs5zzy3ye2f 2025-01-15 18:54:33+00:00|...

CVE-2025-22742

CVE-2025-22742 affects the WP ViewSTL plugin for WordPress (falldeaf). It is a DOM-based XSS caused by improper input handling during web-page generation, affecting WP ViewSTL up to version 1.0. The Wordfence entry notes a patch status of Unpatched and provides no exploitation details or remediat...

CVE-2025-22742 WordPress WP ViewSTL plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in falldeaf WP ViewSTL wp-viewstl allows DOM-Based XSS.This issue affects WP ViewSTL: from n/a through = 1.0...