CVE-2025-23898

CVE-2025-23898 describes a CSRF-to-Stored XSS vulnerability in the WordPress plugin Apply with LinkedIn buttons (Ivo Brett – ApplyMetrics). Public details indicate the issue affects versions n/a–2.3, with CVSS v3.1 base score 7.1 (HIGH). Connected Red Hat entry confirms the CSRF-to-Stored XSS des...

CVE-2025-23898 WordPress Apply with LinkedIn buttons plugin <= 2.3 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in ivobrett Apply with LinkedIn buttons apply-with-linkedin-buttons allows Stored XSS.This issue affects Apply with LinkedIn buttons: from n/a through = 2.3...