High · 7.1 CVE-2025-22741 EUVD-2025-209955GHSA-64x7-8qh7-xq7m

WordPress Felan Framework plugin <= 1.1.3 - Reflected Cross Site Scripting (XSS) vulnerability

Published May 27, 2026 · Updated May 27, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RiceTheme Felan Framework allows Reflected XSS.

This issue affects Felan Framework: from n/a through 1.1.3.

Vendor	Product	Affected	Fixed
RiceTheme	Felan Framework	≤ 1.1.3	—