CVE-2025-31853

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Erez Hadas-Sonnenschein Smartarget Popup smartarget-popup allows Stored XSS.This issue affects Smartarget Popup: from n/a through = 1.5...

CVE-2025-31853

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Erez Hadas-Sonnenschein Smartarget Popup smartarget-popup allows Stored XSS.This issue affects Smartarget Popup: from n/a through = 1.5...

CVE-2025-31853

CVE-2025-31853 : Stored Cross-Site Scripting in Smartarget Popup (WordPress plugin) affecting versions up to 1.4. The vulnerability arises from improper input handling during web page generation, enabling an attacker with Administrator+ privileges to inject stored script. Exploitation is describe...