CVE-2025-23995

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ta2g Tantyyellow allows Reflected XSS.This issue affects Tantyyellow: from n/a through 1.0.0.5...

CVE-2025-23995

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ta2g Tantyyellow allows Reflected XSS.This issue affects Tantyyellow: from n/a through 1.0.0.5...

CVE-2025-23995

CVE-2025-23995 affects the WordPress Tantyyellow theme (versions up to 1.0.0.5). Connected sources confirm an Improper Neutralization of Input During Web Page Generation (Reflected XSS) vulnerability in Tantyyellow, with CVSS v3.1 base score 7.1 (HIGH). Publicly noted affected range includes 1.0....