cleantalk
Vulnerabilities and Security Researches

Cincopa video and media plug-in, CVE-2025-62142

CVE, Research URL

CVE-2025-62142

Published on
Dec 31, 2025
Research Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nicashmu Cincopa video and media plugin allows Stored XSS.This issue affects Cincopa video and media plug-in: from n/a through 1.163.
Affected versions
max 1.163.
Status
vulnerable