CVE-2025-23598

CVE-2025-23598 is a Reflected XSS in the WordPress plugin Recip.ly (WordPress plugin/Recip.ly) that affects versions up to 1.1.8. The vulnerability arises from improper neutralization of user-supplied input during web page generation, enabling cross-site scripting. Multiple sources (NVD, Red Hat ...