7.1
High
CVE-2025-22282 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in keksdieb ez Form…
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in keksdieb ez Form Calculator Premium ez-form-calculator-premium allows Reflected XSS.This issue affects ez Form Calculator Premium: from n/a through <= 2.14.1.2.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ez Form Calculator - WordPress plugin 2.14 | earliest → 2.14.1.2 | No fix stated |
| ez Form Calculator Premium 2.14 | earliest → 2.14.1.2 | No fix stated |