CVE-2025-27295

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpion Live css css-live allows Stored XSS.This issue affects Live css: from n/a through = 1.3...

CVE-2025-27295

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpion Live css css-live allows Stored XSS.This issue affects Live css: from n/a through = 1.3...

CVE-2025-27295

CVE-2025-27295 corresponds to a Cross-Site Scripting (stored XSS) flaw in the WordPress plugin Live css (wpion Live css). Affected: Live css versions up to 1.3. Root cause: improper input neutralization during web page generation. Impact: stored XSS risk for page visitors; CVSS v3.1 base score 7....