WP Flipclock, CVE-2025-39540

CVE, Research URL: CVE-2025-39540
Home page URL: Security reports for WP Flipclock
Application: WP Flipclock
Published on: Apr 16, 2025
Research Description: WP Flipclock [wp-flipclock] <= 1.9 (unfixed) CVE-2025-39540 [en] Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rhys Wynne WP Flipclock allows DOM-Based XSS. This issue affects WP Flipclock: from n/a through 1.9.
Affected versions: Min -, max 1.9.
Status: vulnerable