7.1
High
CVE-2025-23739 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jtibbles WP…
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jtibbles WP Ultimate Reviews FREE wp-ultimate-reviews-free allows Reflected XSS.This issue affects WP Ultimate Reviews FREE: from n/a through <= 1.0.2.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WP Ultimate Reviews FREE 1.0 | earliest → 1.0.2 | No fix stated |
| WP Ultimate Reviews FREE 1.0 | earliest → 1.0.2 | No fix stated |