CVE-2025-24610

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Christian Leuenberg Restrict Anonymous Access restrict-anonymous-access allows Stored XSS.This issue affects Restrict Anonymous Access: from n/a through = 1.2...

CVE-2025-24610

CVE-2025-24610 is a stored Cross-Site Scripting vulnerability in the WordPress plugin Restrict Anonymous Access (versions up to 1.2). The issue arises from improper neutralization of input during web page generation, allowing attacker-controlled input to be stored and subsequently executed in the...