CVE-2025-47524

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in karim42 Quran multilanguage Text & Audio quran-text-multilanguage allows Stored XSS.This issue affects Quran multilanguage Text & Audio: from n/a through = 2.3.23...

CVE-2025-47524

CVE-2025-47524 describes a stored XSS in the WordPress plugin Quran multilanguage Text & Audio. The vulnerability stems from improper neutralization of user input during web page generation, allowing stored cross-site scripting across affected pages. The entry covers versions n/a through 2.3.23, ...

CVE-2025-47524: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in karim42 Quran multilanguage Text & Audio quran-text-multilanguage allows Stored XSS.This issue affects Quran multilanguage Text & Audio: from n/a through = 2.3.23...

CVE-2024-11973: Improper Neutralization of Input During Web Page Generation

The Quran multilanguage Text & Audio plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'sourate' and 'lang' parameter in all versions up to, and including, 2.3.21 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...