high7.1
CVE-2025-23468
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wrenchpilot Essay Wizard (wpCRES) essay-wizard-wpcres all…
Impact
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wrenchpilot Essay Wizard (wpCRES) essay-wizard-wpcres allows Reflected XSS.This issue affects Essay Wizard (wpCRES): from n/a through <= 1.0.6.4.
Affected products
| Product | Affected versions |
|---|---|
| Essay Wizard (WpCRES): From N/A Through | through 1.0.6.4. |
Versions were read from the advisory text. No structured product data has been published for this record yet.