Skip to content
Sign in
7.1 High

CVE-2025-23843 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wphrmanager…

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wphrmanager WP-HR Manager: The Human Resources Plugin for WordPress wp-hr-manager allows Reflected XSS.This issue affects WP-HR Manager: The Human Resources Plugin for WordPress: from n/a through <= 3.1.0.

Affected products and versions

Product Affected versions Fixed in
WP-HR Manager: The Human Resources Plugin for WordPress 3.1 earliest → 3.1.0 No fix stated

Other CVEs of WP-HR Manager: The Human Resources Plugin for WordPress

The 2 CVEs of WP-HR Manager: The Human Resources Plugin for WordPress →
CVE-2022-4974 The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request… 6.3 Medium
Track this CVE