CVE-2025-23986

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in fyrewurks Tiki Time allows Reflected XSS.This issue affects Tiki Time: from n/a through 1.3...

CVE-2025-23986

creationtimestamp| type| source ---|---|--- 2025-05-19 16:39:01+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16873 2025-05-19 17:13:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpk2zaqubg2l...

CVE-2025-23986

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in fyrewurks Tiki Time allows Reflected XSS.This issue affects Tiki Time: from n/a through 1.3...

CVE-2025-23986

CVE-2025-23986 affects the WordPress Tiki Time theme (fyrewurks) up to version 1.3, with a Reflected XSS caused by improper input neutralization during web page generation. Affected versions include 1.3 and earlier. Remediation is to upgrade to a fixed version (exact patch version not specified i...