WordPress WP Proposals plugin <= 2.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by savphill in WordPress Plugin WP Proposals versions = 2.3...

CVE-2025-31837

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Codeus WP Proposals allows Stored XSS. This issue affects WP Proposals: from n/a through 2.3...

CVE-2025-31837

creationtimestamp| type| source ---|---|--- 2025-04-01 15:12:45+00:00| seen| https://bsky.app/profile/potato.software/post/3llr5w27dcr2u...

CVE-2025-31837 WordPress WP Proposals plugin <= 2.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Codeus WP Proposals allows Stored XSS. This issue affects WP Proposals: from n/a through 2.3...

CVE-2025-31837

CVE-2025-31837 is a Stored XSS vulnerability in the WordPress plugin WP Proposals (WP Proposals). Affected: WP Proposals versions up to 2.3. The initial document does not specify a root cause, exploit vector, impact details beyond Stored XSS, or any available fix; no connected documents provide c...