Skip to content
Sign in
5.9 Medium

CVE-2025-54727 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in…

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CreativeMindsSolutions CM On Demand Search And Replace cm-on-demand-search-and-replace allows Stored XSS.This issue affects CM On Demand Search And Replace: from n/a through <= 1.5.2.

Affected products and versions

Product Affected versions Fixed in
CM On Demand Search And Replace 1.5 earliest → 1.5.2 No fix stated

Other CVEs of CM On Demand Search And Replace

The 5 CVEs of CM On Demand Search And Replace →
CVE-2025-54045 Missing Authorization vulnerability in CreativeMindsSolutions CM On Demand Search And Replace… 4.3 Medium CVE-2025-54728 Cross-Site Request Forgery (CSRF) vulnerability in CreativeMindsSolutions CM On Demand Search And Replace… 4.3 Medium CVE-2023-28749 Cross-Site Request Forgery (CSRF) vulnerability in CreativeMindsSolutions CM On Demand Search And Replace… 4.3 Medium CVE-2023-31228 Auth 5.9 Medium
Track this CVE