CVE-2025-23863

creationtimestamp| type| source ---|---|--- 2025-01-16 21:18:24+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfv7eswkog2f...

CVE-2025-23863

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sabaoh Rollover Tab rollover-tab allows Stored XSS.This issue affects Rollover Tab: from n/a through = 1.3.2...

CVE-2025-23863

CVE-2025-23863 refers to a Stored XSS in the Rollover Tab WordPress plugin (Eiji ‘Sabaoh’ Yamada). The vulnerability affects Rollover Tab versions n/a–1.3.2 and arises from improper neutralization of input during web page generation, enabling stored cross-site scripting. The CVSS metrics indicate...

CVE-2025-23863 WordPress Rollover Tab plugin <= 1.3.2 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sabaoh Rollover Tab rollover-tab allows Stored XSS.This issue affects Rollover Tab: from n/a through = 1.3.2...