CVE-2025-53286

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jhainey Milevis Dropify wc-dropi-integration allows Reflected XSS.This issue affects Dropify: from n/a through = 4.7.2...

CVE-2025-53286

CVE-2025-53286 concerns a Cross-Site Scripting (XSS) in the WordPress Dropify plugin integration wc-dropi-integration. Multiple connected sources describe an improper neutralization of user input during web page generation that allows reflected XSS against Dropify releases up to and including ver...