CVE-2025-25094

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Amitythemes.com Breaking News Ticker breaking-news-ticker allows Stored XSS.This issue affects Breaking News Ticker: from n/a through = 2.4.4...

CVE-2025-25094 WordPress Breaking News Ticker plugin <= 2.4.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Amitythemes.com Breaking News Ticker allows Stored XSS. This issue affects Breaking News Ticker: from n/a through 2.4.4...

CVE-2025-25094 WordPress Breaking News Ticker plugin <= 2.4.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Amitythemes.com Breaking News Ticker breaking-news-ticker allows Stored XSS.This issue affects Breaking News Ticker: from n/a through = 2.4.4...

CVE-2025-25094

CVE-2025-25094 is a stored XSS in the WordPress plugin “Breaking News Ticker” (versions n/a–2.4.4) due to improper input neutralization during web page generation. The issue affects the Breaking News Ticker plugin and has a recorded CVSSv3.1 base score of 6.5 (Medium) with network attack vector, ...