CVE-2025-60149

CVE-2025-60149 affects Notely (WordPress plugin). Reported as Stored XSS due to Improper Input Neutralization during Web Page Generation. Affected: Notely versions up to 1.8.0. Required access: authenticated (Administrator+). Description and context come from the CVE entry and the Wordfence vulne...

CVE-2025-60149 WordPress Notely plugin <= 1.8.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rocket Apps Notely notely allows Stored XSS.This issue affects Notely: from n/a through = 1.8.0...

CVE-2025-60149 WordPress Notely plugin <= 1.8.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rocket Apps Notely notely allows Stored XSS.This issue affects Notely: from n/a through = 1.8.0...