CVE-2025-26997

Wireless Butler (WordPress plugin) is reported to be vulnerable to Reflected XSS due to improper input neutralization during web page generation. Affected versions are 1.0.11 and earlier; CVSS v3.1 base score 7.1 ( HIGH ). Connected sources confirm the vulnerability and affected range but do not ...

PT-2025-22057 · Validas · Wireless Butler

Name of the Vulnerable Software and Affected Versions: validas Wireless Butler versions 1.0.11 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS attacks. Recommendations:...