Security Advisory

CVE-2025-23924

6.5
MEDIUM

Vulnerability Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jeremy WP Photo Sphere wp-photo-sphere allows Stored XSS.This issue affects WP Photo Sphere: from n/a through <= 3.8.
Published Date January 16, 2025
Official Source NIST NVD Advisory