CVE-2025-49437

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in worstguy WP LOL Rotation league-of-legends-rotation allows Stored XSS.This issue affects WP LOL Rotation: from n/a through = 1.0...

CVE-2025-49437

CVE-2025-49437 affects the WordPress plugin WP LOL Rotation (versions n/a through 1.0). The issue is Improper Neutralization of Input During Web Page Generation, i.e., a Stored XSS vulnerability. Public sources describe the vulnerability and CVSS v3.1 base score of 6.5 (AV:N/AC:L/PR:L/UI:R/S:C/C:...