CVE-2025-23848

creationtimestamp| type| source ---|---|--- 2025-01-16 21:18:05+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfv7eazvcr2b...

CVE-2025-23848

Cross-Site Request Forgery CSRF vulnerability in dpowney Hotspots Analytics hotspots allows Stored XSS.This issue affects Hotspots Analytics: from n/a through = 4.0.12...

CVE-2025-23848 WordPress Hotspots Analytics plugin <= 4.0.12 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in dpowney Hotspots Analytics hotspots allows Stored XSS.This issue affects Hotspots Analytics: from n/a through = 4.0.12...

CVE-2025-23848

CVE-2025-23848 affects Hotspots Analytics (Daniel Powney) on WordPress. The issue is a CSRF that can lead to Stored XSS, affecting Hotspots Analytics versions n/a–4.0.12. Red Hat’s advisory and Patchstack-linked references corroborate CSRF with potential stored XSS; the documents do not provide e...