4 matches found
CVE-2025-31770
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in OTWthemes Content Manager Light content-manager-light allows Stored XSS.This issue affects Content Manager Light: from n/a through = 3.2...
WordPress Content Manager Light plugin <= 3.2 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by SOPROBRO in WordPress Plugin Content Manager Light versions = 3.2...
CVE-2025-31770
CVE-2025-31770 is a Stored XSS in Content Manager Light for WordPress, affecting versions up to 3.2. The issue arises during web page generation and requires authenticated access (Contributor+). The CVSS v3.1 base score is 6.5 (NETWORK access, LOW attack complexity, LOW privileges, UI required; c...
CVE-2025-31770 WordPress Content Manager Light plugin <= 3.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in OTWthemes Content Manager Light allows Stored XSS. This issue affects Content Manager Light: from n/a through 3.2...