CVE-2025-28926

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in popeating Post Read Time post-read-time allows Stored XSS.This issue affects Post Read Time: from n/a through = 1.2.6...

CVE-2025-28926

CVE-2025-28926 describes a Stored XSS vulnerability in the WordPress plugin Post Read Time (versions up to and including 1.2.6). The issue stems from improper neutralization of input during web page generation, enabling cross-site scripting via stored input. Public sources in the provided documen...