Document Library Lite, CVE-2025-67986

CVE, Research URL: CVE-2025-67986
Home page URL: Security reports for Document Library Lite
Application: Document Library Lite
Published on: Dec 16, 2025
Research Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Barn2 Plugins Document Library Lite document-library-lite allows DOM-Based XSS.This issue affects Document Library Lite: from n/a through <= 1.1.7.
Affected versions: max 1.1.7.
Status: vulnerable