Skip to content
Sign in
6.5 Medium

CVE-2025-22727 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginOps…

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginOps MailChimp Subscribe Forms mailchimp-subscribe-sm allows Stored XSS.This issue affects MailChimp Subscribe Forms : from n/a through <= 4.1.

Affected products and versions

Product Affected versions Fixed in
MailChimp Subscribe Forms 4.1 earliest → 4.1 No fix stated

Other CVEs of MailChimp Subscribe Forms

The 3 CVEs of MailChimp Subscribe Forms →
CVE-2026-27536 Unauthenticated Cross Site Scripting (XSS) in MailChimp Subscribe Forms <= 4.3.3 versions 7.1 High CVE-2024-43211 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginOps… 5.9 Medium
Track this CVE