CVE-2025-48152

CVE-2025-48152 describes a Reflected Cross-Site Scripting (XSS) vulnerability in the WordPress plugin RentSyst (Rentsyst) version up to 2.0.100. The root cause is improper neutralization of input during web page generation, enabling XSS payloads to be reflected. The CVSS v3.1 vector indicates a N...