CVE-2025-23465

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in magent Vampire Character Manager vampire-character allows Reflected XSS.This issue affects Vampire Character Manager: from n/a through = 2.13...

CVE-2025-23465

CVE-2025-23465 concerns the WordPress plugin Vampire Character Manager (versions <= 2.13). The issue is a Reflected Cross‑Site Scripting (XSS) vulnerability caused by improper neutralization of input during web page generation. Affected product: WordPress Vampire Character Manager plugin