CVE-2025-24557

The CVE-2025-24557 entry concerns the WordPress PlainInventory plugin (PlainInventory) with versions n/a through 3.1.5. The root cause is improper neutralization of inputs during web-page generation, leading to a reflected XSS vulnerability. Affected component/file is the input handling used in p...