CVE-2025-23497

Cross-Site Request Forgery CSRF vulnerability in albdesign Simple Project Manager simple-project-managment allows Stored XSS.This issue affects Simple Project Manager: from n/a through = 1.2.2...

CVE-2025-23497

creationtimestamp| type| source ---|---|--- 2025-01-16 20:17:15+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfv3xi6yca2t 2025-01-16 21:23:10+00:00| seen| https://infosec.exchange/users/cve/statuses/113840133866340165...

CVE-2025-23497 WordPress Simple Project Manager plugin <= 1.2.2 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF vulnerability in albdesign Simple Project Manager simple-project-managment allows Stored XSS.This issue affects Simple Project Manager: from n/a through = 1.2.2...

CVE-2025-23497

CVE-2025-23497 : Red Hat and NVD entries confirm a CSRF vulnerability in Albdesign Simple Project Manager that enables a Stored XSS vector in versions up to 1.2.2. Affected product: Simple Project Manager. Root cause/impact: Cross-Site Request Forgery enabling stored cross-site scripting as descr...