CVE-2025-23650

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in razvypp Tidy.ro tidyro allows Reflected XSS.This issue affects Tidy.ro: from n/a through = 1.3...

CVE-2025-23650

creationtimestamp| type| source ---|---|--- 2025-02-14 13:16:52+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5byhrvor2c 2025-02-14 13:53:46+00:00| seen| https://infosec.exchange/users/cve/statuses/114002573737959769...

CVE-2025-23650

CVE-2025-23650 describes a reflected XSS vulnerability in the WordPress plugin “Tidy.ro” by razvypp. The Red Hat and NVD entries confirm the flaw as an Improper Neutralization of Input During Web Page Generation, enabling Reflected XSS for Tidy.ro versions up to 1.3 (development and affected scop...

CVE-2025-23650 WordPress Tidy.ro plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in razvypp Tidy.ro tidyro allows Reflected XSS.This issue affects Tidy.ro: from n/a through = 1.3...