CVE-2025-23760

CVE-2025-23760 is a Stored XSS vulnerability in the Chatter plugin for WordPress, caused by Improper Neutralization of Input During Web Page Generation. Affected versions are reported as from n/a through 1.0.1. The Red Hat security entry repeats this description and identifies the same CVE ID, co...

CVE-2025-23760 WordPress Chatter plugin <= 1.0.1 - CSRF to Stored XSS vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Alex Volkov Chatter allows Stored XSS. This issue affects Chatter: from n/a through 1.0.1...