CVE-2025-23920

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sourcing Team ApplicantPro applicantpro allows Reflected XSS.This issue affects ApplicantPro: from n/a through = 1.3.9...

CVE-2025-23920 WordPress ApplicantPro Plugin <= 1.3.9 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sourcing Team ApplicantPro applicantpro allows Reflected XSS.This issue affects ApplicantPro: from n/a through = 1.3.9...

CVE-2025-23920

CVE-2025-23920 is a Reflected Cross-Site Scripting (XSS) vulnerability in the WordPress Plugin “ApplicantPro” (WordPress ApplicantPro). The entry states improper neutralization of input during web page generation, allowing reflected XSS for applicants up to version 1.3.9. Connected sources (e.g.,...