7.1 High

CVE-2025-27269 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Anton…

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Anton Aleksandrov .htaccess Login block htaccess-login-block allows Reflected XSS.This issue affects .htaccess Login block: from n/a through <= 0.9a.

Affected products and versions

Product	Affected versions	Fixed in
.htaccess Login block 0.9	earliest → 0.9a	No fix stated
.htaccess Login block 0.9	earliest → 0.9a	No fix stated

Do you use .htaccess Login block?

Track this CVE Watch .htaccess Login block Check my SBOMs

www.cveye.io/en/cve/CVE-2025-27269

Timeline

Published March 3, 2025
Last modified April 28, 2026

References

patchstack.com patchstack.com

Track this CVE