cleantalk
Vulnerabilities and Security Researches

SKT Skill Bar, CVE-2025-66090

CVE, Research URL

CVE-2025-66090

Application

SKT Skill Bar

Published on
Nov 21, 2025
Research Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sonalsinha21 SKT Skill Bar skt-skill-bar allows DOM-Based XSS.This issue affects SKT Skill Bar: from n/a through <= 2.5.
Affected versions
max 2.5.
Status
vulnerable