Skip to content
CVE PROGRAM SOURCE RECORD8.4 High

CVE-2025-9427

Admin reflected XSS

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
NCSC-FI

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Lemonsoft WordPress add on allows Cross-Site Scripting (XSS).This issue affects WordPress add on: 2025.7.1.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Lemonsoft WordPress add-on

Default version status: unaffected

  • 2025.7.1affected
  • 2025.8.1unaffected

References