CVE-2025-22796

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in platcom WP-Asambleas wp-asambleas allows Reflected XSS.This issue affects WP-Asambleas: from n/a through = 2.85.0...

CVE-2025-22796

The CVE-2025-22796 entry concerns the WordPress WP-Asambleas plugin (versions up to and including 2.85.0). The vulnerability is an Improper Neutralization of Input During Web Page Generation, i.e., a Reflected Cross-Site Scripting (XSS) flaw in WP-Asambleas. The root cause is unneutralized user i...