7.1
High
CVE-2025-23881 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in littlejon LJ…
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in littlejon LJ Custom Menu Links lj-custom-menu-links allows Reflected XSS.This issue affects LJ Custom Menu Links: from n/a through <= 2.5.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| LJ Custom Menu Links 2.5 | earliest → 2.5 | No fix stated |
| LJ Custom Menu Links 2.5 | earliest → 2.5 | No fix stated |