CVE-2025-23802

CVE-2025-23802 is a stored XSS in WP-Revive Adserver (WordPress plugin) caused by improper neutralization of input during web page generation. Affected: WP-Revive Adserver versions

CVE-2025-23802 WordPress WP-Revive Adserver Plugin <= 2.2.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SteveSoehl WP-Revive Adserver wp-revive-adserver allows Stored XSS.This issue affects WP-Revive Adserver: from n/a through = 2.2.1...