7.1
High
CVE-2025-22680 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Ad…
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Ad Inserter Pro allows Reflected XSS. This issue affects Ad Inserter Pro: from n/a through 2.7.39.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Ad Inserter Pro 2.7 | earliest → 2.7.39 | No fix stated |