CVE-2025-23795

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ghuger Easy FAQs easy-faqs allows Stored XSS.This issue affects Easy FAQs: from n/a through = 3.2.1...

CVE-2025-23795 WordPress Easy FAQs plugin <= 3.2.1 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ghuger Easy FAQs easy-faqs allows Stored XSS.This issue affects Easy FAQs: from n/a through = 3.2.1...

CVE-2025-23795

CVE-2025-23795 is a stored XSS in the WordPress Easy FAQs plugin (vulnerable through 3.2.1). Exploitation requires authentication (Contributor+). Root cause: improper input handling during web page generation. Current connected sources (Red Hat RH:CVE-2025-23795 and Wordfence vulnerability listin...