CVE-2025-23850

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mojowill Mojo Under Construction mojo-under-construction allows Reflected XSS.This issue affects Mojo Under Construction: from n/a through = 1.1.2...

CVE-2025-23850

The CVE-2025-23850 entry describes a Reflected XSS in the WordPress plugin Mojo Under Construction, affecting versions up to 1.1.2. Root cause: improper neutralization of input during web page generation (input handling leading to reflected script execution). Impact is reflected XSS with low to m...