CVE-2025-23891

creationtimestamp| type| source ---|---|--- 2025-01-16 21:19:15+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfv7gcqug22n 2025-01-17 21:56:51+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2217...

CVE-2025-23891

CVE-2025-23891 affects Yet Another Countdown Plugin (WordPress). Public records confirm a DOM-based Cross-Site Scripting vulnerability due to improper input handling during web page generation. The Red Hat entry and Wordfence report this as applicable to Yet Another Countdown with affected versio...