CVE-2025-23744

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in dvs11 Random Posts, Mp3 Player + ShareButton random-posts-mp3-player-sharebutton allows Reflected XSS.This issue affects Random Posts, Mp3 Player + ShareButton: from n/a through = 1.4.1...

EUVD-2025-6634

Malicious code in bioql PyPI...

CVE-2025-23744

CVE-2025-23744 affects the WordPress plugin Random Posts, Mp3 Player + ShareButton and its versions up to 1.4.1. The issue is a Reflected Cross-Site Scripting (XSS) vulnerability arising from improper input neutralization during web page generation. Public sources listed in the connected document...