TI-2025-28425 CVE-2025-43841 · GHSA-5f94-w474-qm8f
WordPress WP Vegas plugin <= 2.2 - Cross Site Scripting (XSS) vulnerability
Priority LOW 28
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jamesdbruner WP Vegas vegas-fullscreen-background-slider allows Stored XSS.This issue affects WP Vegas: from n/a throu…