WordPress FlatNews plugin cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. WordPress FlatNews plugin suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escaping of user-supplied data, whi...

CVE-2025-32305

CVE-2025-32305 describes a Reflected XSS in the WordPress theme FlatNews (affected up to version 5.8). The root cause is ImpropER Neutralization of Input During Web Page Generation , allowing an attacker to inject arbitrary HTML/JavaScript via a crafted URL that is reflected in the page. The CVSS...

CVE-2025-32305 WordPress FlatNews theme <= 5.8 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sneeit WordPress FlatNews Theme flatnews allows Reflected XSS.This issue affects WordPress FlatNews Theme: from n/a through = 5.8...

CVE-2025-32305: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sneeit WordPress FlatNews Theme flatnews allows Reflected XSS.This issue affects WordPress FlatNews Theme: from n/a through = 5.8...