CVE-2025-22650

CVE-2025-22650 describes a Stored XSS in the WordPress plugin Smartarget-contact-us (Smartarget) due to improper input neutralization, affecting versions up to and including 1.5.3. Public sources (NVD, Red Hat, CVELIST, Patchstack) corroborate the XSS entry and affected range. The Patchstack entr...