CVE-2025-25154

Cross-Site Request Forgery CSRF vulnerability in scweber Custom Comment Notifications custom-comment-notifications allows Stored XSS.This issue affects Custom Comment Notifications: from n/a through = 1.0.8...

CVE-2025-25154

CVE-2025-25154 refers to a CSRF to stored XSS vulnerability in the WordPress plugin Custom Comment Notifications by scweber, affecting versions 1.0.8 and earlier . The issue is triggered via Cross-Site Request Forgery enabling stored XSS payloads, with no exploitation details publicly provided in...

PT-2025-5962 · Unknown · Scweber Custom Comment Notifications

Name of the Vulnerable Software and Affected Versions: scweber Custom Comment Notifications versions 1.0.8 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a...