CVE-2025-28921

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in homejunction SpatialMatch IDX spatialmatch-free-lifestyle-search allows Reflected XSS.This issue affects SpatialMatch IDX: from n/a through = 3.0.9...

CVE-2025-28921

CVE-2025-28921 is a Reflected Cross-Site Scripting (XSS) vulnerability in the WordPress plugin SpatialMatch IDX (NotFound SpatialMatch IDX). Affected versions are up to 3.0.9. The CVE description notes improper neutralization of input during web page generation, enabling reflected XSS. The associ...