CVE-2025-30539

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Benedikt Mo BMo Expo bmo-expo allows Stored XSS.This issue affects BMo Expo: from n/a through = 1.0.15...

CVE-2025-30539 WordPress BMo Expo plugin <= 1.0.15 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Benedikt Mo BMo Expo bmo-expo allows Stored XSS.This issue affects BMo Expo: from n/a through = 1.0.15...

CVE-2025-30539 WordPress BMo Expo plugin <= 1.0.15 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Benedikt Mo BMo Expo allows Stored XSS. This issue affects BMo Expo: from n/a through 1.0.15...

CVE-2025-30539

CVE-2025-30539 describes an authenticated Stored Cross-Site Scripting vulnerability in the WordPress/BMo Expo plugin. The vulnerability affects versions up to 1.0.15, with exploit potential requiring authentication. The connected Wordfence vulnerability entry labels it as an authentication‑requir...