Skip to content
Sign in
7.1 High

CVE-2025-28988 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in aharonyan WP Front…

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in aharonyan WP Front User Submit / Front Editor front-editor allows Reflected XSS.This issue affects WP Front User Submit / Front Editor: from n/a through <= 4.9.3.

Affected products and versions

Product Affected versions Fixed in
WP Front User Submit / Front Editor 4.9 earliest → 4.9.3 No fix stated

Other CVEs of WP Front User Submit / Front Editor

The 3 CVEs of WP Front User Submit / Front Editor →
CVE-2025-52795 Cross-Site Request Forgery (CSRF) vulnerability in aharonyan WP Front User Submit / Front Editor front-editor allows… 7.1 High CVE-2025-47617 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in aharonyan WP Front… 5.9 Medium
Track this CVE