Skip to content
Sign in
5.9 Medium

CVE-2025-39444 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in maxfoundry…

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in maxfoundry MaxButtons maxbuttons allows Stored XSS.This issue affects MaxButtons: from n/a through <= 9.8.3.

Affected products and versions

Product Affected versions Fixed in
MaxButtons 9.8 earliest → 9.8.3 No fix stated

Other CVEs of MaxButtons

The 3 CVEs of MaxButtons →
CVE-2024-6499 The WordPress Button Plugin MaxButtons plugin for WordPress is vulnerable to information exposure in all versions up to,… 5.3 Medium CVE-2024-3026 The WordPress Button Plugin MaxButtons WordPress plugin before 9.7.8 does not sanitise and escape some parameters, which… 5.4 Medium
Track this CVE