CVE-2026-125733

The ShopLentor (woolentor-addons) WordPress plugin is vulnerable to Reflected Cross-Site Scripting (XSS) in versions up to and including 3.5.7 . The root cause is the improper neutralization of input during web page generation (CWE-79), which allows an attacker to execute malicious scripts in a u...

CVE-2025-58990: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DevItems ShopLentor woolentor-addons allows Stored XSS.This issue affects ShopLentor: from n/a through = 3.2.0...