6.5
Medium
CVE-2025-67553 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeHigh Advanced…
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeHigh Advanced FAQ Manager advanced-faq-manager allows DOM-Based XSS.This issue affects Advanced FAQ Manager: from n/a through <= 1.5.2.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Advanced FAQ Manager 1.5 | earliest → 1.5.2 | No fix stated |
References
- patchstack.com patchstack.com
Timeline
- Published
- Last modified