5.9
Moyenne
CVE-2025-22579 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Arefly WP Header…
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Arefly WP Header Notification wp-header-notification allows Stored XSS.This issue affects WP Header Notification: from n/a through <= 1.2.7.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| WP Header Notification 1.2 | premières → 1.2.7 | Pas de correctif indiqué |