TI-2025-17339 CVE-2025-23572 · GHSA-wfpm-96m8-86ph
WordPress UpDownUpDown plugin <= 1.1 - CSRF to Stored XSS vulnerability
Priority LOW 31
Cross-Site Request Forgery (CSRF) vulnerability in Dave Konopka UpDownUpDown updownupdown-postcomment-voting allows Stored XSS.This issue affects UpDownUpDown: from n/a through <= 1.1.