CVE-2025-48102

CVE-2025-48102 describes a stored XSS in the WordPress plugin GoUrl Bitcoin Payment Gateway & Paid Downloads & Membership versions up to 1.6.6 . The vulnerability arises from improper neutralization of input during web page generation, enabling stored cross-site scripting. Public sources in conne...