CVE-2025-22558

Published: 2025-01-07T16:15Z

Last Modified: 2025-01-07T16:15Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Marcus C. J. Hartmann mcjh button shortcode allows Stored XSS.This issue affects mcjh button shortcode: from n/a through 1.6.4. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt