CVE-2025-23500

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in faaiq Simple Custom post type custom field simple-content-construction-kit allows Reflected XSS.This issue affects Simple Custom post type custom field: from n/a through = 1.0.3...

CVE-2025-23500

CVE-2025-23500 describes a Reflected XSS in the WordPress plugin Simple Custom post type custom field (also listed as Simple Content Construction Kit) that allows input that is not properly neutralized during web page generation. Affected versions are from n/a through 1.0.3. The CVSS/metrics indi...