CVE-2025-53296 Information

Jun 28, 2025 cve

Description

Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability in ecoal95 EC Stars Rating allows Stored XSS. This issue affects EC Stars Rating: from n/a through 1.0.11.

Reference

https://patchstack.com/database/wordpress/plugin/ec-stars-rating/vulnerability/wordpress-ec-stars-rating-plugin-1-0-11-cross-site-scripting-xss-vulnerability?_s_id=cve

CNNVD-202506-3442 (Published: 2025-06-27)

Share on: