CVE-2025-23756: WordPress LawPress plugin <= 1.4.5 - Reflected Cross Site Scripting (XSS) v

WordPress LawPress plugin <= 1.4.5 - Reflected Cross Site Scripting (XSS) vulnerability

Status

Published

2025-01-27

Updated

2026-05-11

Assigning organization

Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ivanchernyakov LawPress – Law Firm Website Management lawpress allows Reflected XSS.This issue affects LawPress – Law Firm Website Management: from n/a through <= 1.4.5.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ivanchernyakov LawPress – Law Firm Website Management

Default version status: unaffected

0 to ≤ 1.4.5affected

References

https://patchstack.com/database/Wordpress/Plugin/lawpress/vulnerability/wordpress-lawpress-plugin-1-4-5-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve ↗