TI-2025-12697 CVE-2025-13895 · GHSA-qc3w-f7pj-hx87
Top Position Google Finance <= 0.1.0 - Reflected Cross-Site Scripting
Priority LOW 27
The Top Position Google Finance plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the `$_SERVER['PHP_SELF']` variable in all versions up to, and including, 0.1.0 due to insufficient input sanitizat…