NetSight
medium6.5

CVE-2025-23924

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jeremy WP Photo Sphere wp-photo-sphere allows Stored XSS.…

Impact

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jeremy WP Photo Sphere wp-photo-sphere allows Stored XSS.This issue affects WP Photo Sphere: from n/a through <= 3.8.

Affected products

ProductAffected versions
WP Photo Sphere: From N/A Through
through 3.8.

Versions were read from the advisory text. No structured product data has been published for this record yet.

Weakness classification

References