CVE-2025-28917

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in crazyloong Custom Smilies custom-smilies-se allows Stored XSS.This issue affects Custom Smilies: from n/a through = 2.9.2...

CVE-2025-28917

CVE-2025-28917 : WordPress/Plugin Custom Smilies vulnerability with cross-site scripting (Stored XSS) due to improper neutralization of input during web page generation. Affected: Custom Smilies versions up to 2.9.2 (WordPress plugin). Connected documents confirm this CVE ID corresponds to the XS...