TI-2025-02158 CVE-2025-2483 · GHSA-hf7m-7q5v-h9g5
Gift Certificate Creator <= 1.1.0 - Reflected Cross-Site Scripting via receip_address Parameter
Priority LOW 27
The Gift Certificate Creator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘receip_address’ parameter in all versions up to, and including, 1.1.0 due to insufficient input sanitization and…