Security Advisory

CVE-2025-22794

7.1
HIGH

Vulnerability Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ianhaycox World Cup Predictor world-cup-predictor allows Reflected XSS.This issue affects World Cup Predictor: from n/a through <= 1.9.8.
Published Date February 4, 2025
Official Source NIST NVD Advisory