CVE-2025-48256

CVE-2025-48256 covers a Stored XSS in the WordPress plugin Import Social Events (versions ≤ 1.8.5) by Xylus Themes. The issue stems from improper input neutralization during web page generation, enabling an attacker-supplied payload to be stored and later executed in a victim’s browser. The vulne...