CVE-2025-49871

creationtimestamp| type| source ---|---|--- 2025-06-17 18:33:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrt4z6tozl2k 2025-06-20 13:43:04+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18947...

CVE-2025-49871

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Noptin Newsletter Team Noptin newsletter-optin-box allows Stored XSS.This issue affects Noptin: from n/a through = 3.8.7...

CVE-2025-49871 WordPress Noptin plugin <= 3.8.7 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Noptin Newsletter Team Noptin newsletter-optin-box allows Stored XSS.This issue affects Noptin: from n/a through = 3.8.7...

CVE-2025-49871

CVE-2025-49871 is a stored XSS in the WordPress plugin Noptin (newsletter-optin-box) affecting versions up to 3.8.7. Public sources confirm improper neutralization of input during web page generation, enabling stored cross-site scripting. Multiple sources (NVD, Red Hat, CVE listings) consistently...

WordPress Noptin plugin <= 3.8.7 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by kmaron1n in WordPress Plugin Noptin versions = 3.8.7...