CVE-2025-46250

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Vikas Ratudi VPSUForm v-form allows Stored XSS.This issue affects VPSUForm: from n/a through = 3.1.14...

CVE-2025-46250

creationtimestamp| type| source ---|---|--- 2025-04-22 10:02:55+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12818 2025-04-22 11:05:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnfju6gxeu2u 2025-04-22 14:13:23+00:00| seen|...

CVE-2025-46250

CVE-2025-46250 affects the WordPress plugin VForm (versions up to 3.1.14). The flaw is an improper input neutralization during web page generation, resulting in a Stored Cross‑Site Scripting (XSS) vulnerability. Impact: injected scripts could execute in other users’ browsers when a page containin...

CVE-2025-46250 WordPress VForm <= 3.1.14 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Vikas Ratudi VForm allows Stored XSS. This issue affects VForm: from n/a through 3.1.14...