CVE-2025-23499

CVE-2025-23499 describes a Cross-Site Request Forgery (CSRF) in the Board Election plugin for WordPress that enables Stored XSS. Affected software is the Board Election plugin, with versions from n/a up to 1.0.1. The description across sources confirms the CSRF to stored-XSS vector and impact, wi...

CVE-2025-23499 WordPress Board Election plugin <= 1.0.1 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Pascal Casier Board Election board-election allows Stored XSS.This issue affects Board Election: from n/a through = 1.0.1...