TI-2025-02301 CVE-2025-2635 · GHSA-hqqg-2mp2-77pg
Digital License Manager <= 1.7.3 - Reflected Cross-Site Scripting via remove_query_arg Function
Priority LOW 29
The Digital License Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of remove_query_arg() function without appropriate escaping on the URL in all versions up to, and including,…