medium6.5
CVE-2025-30907
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SecuPress SecuPress Free secupress allows DOM-Based XSS.T…
Impact
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SecuPress SecuPress Free secupress allows DOM-Based XSS.This issue affects SecuPress Free: from n/a through <= 2.2.5.3.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Secupress | Secupress | before 2.2.5.4 |