CVE-2025-13604

CVE-2025-13604 is a stored XSS in the WordPress plugin “Login Security, FireWall, Malware removal by CleanTalk” (versions ≤ 2.168). The root cause is insufficient input sanitization and output escaping on the page URL, enabling unauthenticated attackers to inject scripts executed when users load ...