CVE-2025-23598

creationtimestamp| type| source ---|---|--- 2025-02-14 13:16:42+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5by63rxm2i 2025-02-14 13:38:44+00:00| seen| https://infosec.exchange/users/cve/statuses/114002514671594776...

CVE-2025-23598

CVE-2025-23598 is a Reflected XSS in the WordPress plugin Recip.ly (WordPress plugin/Recip.ly) that affects versions up to 1.1.8. The vulnerability arises from improper neutralization of user-supplied input during web page generation, enabling cross-site scripting. Multiple sources (NVD, Red Hat ...

CVE-2025-23598 WordPress Recip.ly plugin <= 1.1.8 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in [email protected] Recip.ly allows Reflected XSS. This issue affects Recip.ly: from n/a through 1.1.8...