TI-2025-14027 CVE-2025-15378 · GHSA-hhp5-wr44-w3j5
AJS Footnotes <= 1.0 - Unauthenticated Stored Cross-Site Scripting
Priority LOW 37
The AJS Footnotes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'note_list_class' and 'popup_display_effect_in' parameters in all versions up to, and including, 1.0 due to missing authorizatio…