CVE-2025-8281

CVE-2025-8281 concerns the WordPress plugin WP Talroo (versions up to and including 2.4), which does not sanitise or escape a parameter before echoing it in pages, enabling a Reflected Cross-Site Scripting (XSS) attack. This affects WP Talroo