CVE-2025-23853

creationtimestamp| type| source ---|---|--- 2025-02-14 13:17:43+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5bzy5mys2s 2025-02-14 15:08:50+00:00| seen| https://infosec.exchange/users/cve/statuses/114002868946616253...

CVE-2025-23853 WordPress NoFollow Free plugin <= 1.6.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in michelem NoFollow Free nofollow-free allows Reflected XSS.This issue affects NoFollow Free: from n/a through = 1.6.3...

CVE-2025-23853

CVE-2025-23853 affects the WordPress plugin NoFollow Free (michelem NoFollow Free) up to version 1.6.3, allowing Reflected XSS due to improper input neutralization during web page generation. Public sources list NoFollow Free as affected through 1.6.3; Red Hat and CVE databases corroborate the is...

CVE-2025-23853 WordPress NoFollow Free plugin <= 1.6.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in michelem NoFollow Free nofollow-free allows Reflected XSS.This issue affects NoFollow Free: from n/a through = 1.6.3...