WP Notes Widget, CVE-2025-48121

CVE, Research URL: CVE-2025-48121
Home page URL: Security reports for WP Notes Widget
Application: WP Notes Widget
Published on: May 16, 2025
Research Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Steve Puddick WP Notes Widget allows DOM-Based XSS. This issue affects WP Notes Widget: from n/a through 1.0.6.
Affected versions: Min -, max 1.0.6.
Status: vulnerable