cleantalk
Vulnerabilities and Security Researches

Simple shortcode buttons, CVE-2025-23449

CVE, Research URL

CVE-2025-23449

Published on
Jan 22, 2025
Research Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Simple shortcode buttons allows Reflected XSS. This issue affects Simple shortcode buttons: from n/a through 1.3.2.
Affected versions
max 1.3.2.
Status
vulnerable