CVE-2025-22576 WordPress Site PIN Plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Marcus Downing Site PIN site-pin allows Reflected XSS.This issue affects Site PIN: from n/a through = 1.3...

CVE-2025-22576

CVE-2025-22576 is a Reflected XSS in the WordPress plugin/site "Site PIN" (by Marcus Downing), affecting version up to 1.3. The issue stems from improper input neutralization during web page generation. As per the provided sources, the CVE-ID and vulnerability type are confirmed, with a CVSSv3.1 ...