TI-2025-20907 CVE-2025-28964 · GHSA-3wfx-w72c-xg7v
WordPress Personal Favicon plugin <= 2.0 - CSRF to Stored XSS vulnerability
Priority LOW 30
Cross-Site Request Forgery (CSRF) vulnerability in mangup Personal Favicon personal-favicon allows Stored XSS.This issue affects Personal Favicon: from n/a through <= 2.0.