cleantalk
Vulnerabilities and Security Researches

Sermon Manager, CVE-2025-63000

CVE, Research URL

CVE-2025-63000

Application

Sermon Manager

Published on
Dec 31, 2025
Research Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP for church Sermon Manager allows Stored XSS.This issue affects Sermon Manager: from n/a through 2.30.0.
Affected versions
max 2.30.0.
Status
vulnerable