CVE-2025-23754

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ulrich Sossou The Loops the-loops allows Reflected XSS.This issue affects The Loops: from n/a through = 1.0.2...

CVE-2025-23754

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ulrich Sossou The Loops the-loops allows Reflected XSS.This issue affects The Loops: from n/a through = 1.0.2...

CVE-2025-23754

CVE-2025-23754 is a Reflected Cross-Site Scripting (XSS) vulnerability in WordPress plugin “The Loops” by Ulrich Sossou. Affected versions are n/a through 1.0.2; root cause is improper neutralization of input during web page generation, enabling reflected XSS. Connected advisories corroborate the...