Skip to content
Sign in
6.5 Medium

CVE-2025-66090 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sonalsinha21 SKT…

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sonalsinha21 SKT Skill Bar skt-skill-bar allows DOM-Based XSS.This issue affects SKT Skill Bar: from n/a through <= 2.5.

Affected products and versions

Product Affected versions Fixed in
SKT Skill Bar 2.5 earliest → 2.5 No fix stated

Other CVEs of SKT Skill Bar

The 4 CVEs of SKT Skill Bar →
CVE-2026-6972 The SKT Skill Bar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `chart_size` attribute of… 6.4 Medium CVE-2025-47482 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sonalsinha21 SKT… 6.5 Medium CVE-2025-26880 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sonalsinha21 SKT… 6.5 Medium
Track this CVE