TI-2025-30516 CVE-2025-48146 · GHSA-6f38-fhvp-wmggWordPress SEO Flow by LupsOnline plugin <= 2.2.1 - CSRF to Stored XSS vulnerabilityPriority LOW 30Cross-Site Request Forgery (CSRF) vulnerability in Michael Lups SEO Flow by LupsOnline lupsonline-link-netwerk allows Stored XSS.This issue affects SEO Flow by LupsOnline: from n/a through <= 2.2.1.CVSS 3.1HIGH 7.1· Network · No auth · User interaction · EPSS 0.00137 · Published 2025-05-16 · No fix listed CWE-352