CVE-2025-48145 Information

Jun 18, 2025 cve

Description

Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability in Michal Jaworski Track Analyze & Optimize by WP Tao allows Reflected XSS. This issue affects Track Analyze & Optimize by WP Tao: from n/a through 1.3.

Reference

https://patchstack.com/database/wordpress/plugin/wp-tao/vulnerability/wordpress-track-analyze-optimize-by-wp-tao-plugin-1-3-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve

CNNVD-202506-2026 (Published: 2025-06-17)

Share on: