CVE-2025-23428

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Arash Safari QMean – WordPress Did You Mean qmean allows Reflected XSS.This issue affects QMean – WordPress Did You Mean: from n/a through = 2.0...

CVE-2025-23428

CVE-2025-23428 affects the WordPress plugin QMean – WordPress Did You Mean (NotFound) up to version 2.0. It describes a Cross-Site Scripting (XSS) vulnerability caused by improper input neutralization during web page generation, enabling reflected XSS. Public reporting confirms the vulnerability ...