TI-2025-03416 CVE-2025-3868 · GHSA-mghj-58qq-48h7
Custom Admin-Bar Favorites <= 0.1 - Reflected Cross-Site Scripting
Priority LOW 27
The Custom Admin-Bar Favorites plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'menuObject' parameter in all versions up to, and including, 0.1 due to insufficient input sanitization and outp…