7.1
High
CVE-2025-25118 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Danish Ali Malik…
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Danish Ali Malik Top Bar – PopUps – by WPOptin wpoptin allows Reflected XSS.This issue affects Top Bar – PopUps – by WPOptin: from n/a through <= 2.0.8.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Top Bar – PopUps – by WPOptin 2.0 | earliest → 2.0.8 | No fix stated |
| Top Bar – PopUps – by WPOptin 2.0 | earliest → 2.0.8 | No fix stated |