CVE-2025-25129

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound Callback Request allows Reflected XSS. This issue affects Callback Request: from n/a through 1.4...

CVE-2025-25129

The CVE-2025-25129 entry relates to a WordPress plugin issue: Callback Request (NotFound Callback Request) vulnerability tracked as CVE-2025-25129, affecting versions <= 1.4. The root cause is improper input neutralization during web page generation, enabling reflected cross-site scripting (XS...

CVE-2025-25129: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound Callback Request allows Reflected XSS. This issue affects Callback Request: from n/a through 1.4...