CVE-2025-23890

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Tom Ewer Easy Tweet Embed easy-tweet-embed allows DOM-Based XSS.This issue affects Easy Tweet Embed: from n/a through = 1.7...

CVE-2025-23890

creationtimestamp| type| source ---|---|--- 2025-01-16 21:19:11+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfv7g7snqw2f...

CVE-2025-23890

CVE-2025-23890 is a DOM-based XSS in the Easy Tweet Embed WordPress plugin (authors Tom Ewer and Tito Pandu) that affects Easy Tweet Embed up to version 1.7. The description notes an improper neutralization of input during web page generation. Affected product/versions are specified; no exploitat...

CVE-2025-23890 WordPress Easy Tweet Embed plugin <= 1.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Tom Ewer Easy Tweet Embed easy-tweet-embed allows DOM-Based XSS.This issue affects Easy Tweet Embed: from n/a through = 1.7...