CVE-2025-23467

Cross-Site Request Forgery CSRF vulnerability in vimal.ghorecha RSS News Scroller rss-news-scroller allows Stored XSS.This issue affects RSS News Scroller: from n/a through = 2.0.0...

CVE-2025-23467

Cross-Site Request Forgery CSRF vulnerability in vimal.ghorecha RSS News Scroller rss-news-scroller allows Stored XSS.This issue affects RSS News Scroller: from n/a through = 2.0.0...

CVE-2025-23467

CVE-2025-23467 is a CSRF-enabled Stored XSS vulnerability in the WordPress RSS News Scroller plugin, affecting versions up to 2.0.0 (no fixed version details provided in the documents). The CVE entry is corroborated by Red Hat and Wordfence sources; CVSS v3.1 base score 7.1 (HIGH). No explicit re...