CVE-2025-24566 WordPress Intro Tour Tutorial DeepPresentation plugin <= 6.5.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Tomáš Groulík Intro Tour Tutorial DeepPresentation dp-intro-tours allows Reflected XSS.This issue affects Intro Tour Tutorial DeepPresentation: from n/a through = 6.5.2...

CVE-2025-24566

Summary (CVE-2025-24566): Reflected XSS in the WordPress plugin “Intro Tour Tutorial DeepPresentation” versions n/a through 6.5.2 due to improper input neutralization during web page generation. Exploitation details are not provided in the documents, but remediation guidance exists: upgrade to a ...