CVE-2025-39478

CVE-2025-39478 affects WordPress Smart Notification Plugin (Smart Notification) versions ≤ 10.3. It is a Reflected Cross-Site Scripting (XSS) vulnerability. All connected sources (NVD, Red Hat, CNNVD, Patchstack, CVE records) indicate the issue exists and that a fix is not yet provided in the pub...

CVE-2025-39478 WordPress Smart Notification Plugin <= 10.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in smartiolabs Smart Notification allows Reflected XSS. This issue affects Smart Notification: from n/a through 10.3...