CVE-2025-23432

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AlTi5 AlT Report alt-report allows Reflected XSS.This issue affects AlT Report: from n/a through = 1.12.0...

CVE-2025-23432

creationtimestamp| type| source ---|---|--- 2025-01-16 20:16:25+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfv3vyfcnq2t 2025-01-16 20:23:05+00:00| seen| https://infosec.exchange/users/cve/statuses/113839897645382278...

CVE-2025-23432

CVE-2025-23432 affects the WordPress plugin AlT Report (and its UI component “alt-report”). The vulnerability is a Reflected XSS due to improper input neutralization during web page generation, allowing injection via the plugin’s input surface. Affected range: from n/a through