Skip to content
OpenAdvisories
High · 7.1 CVE-2025-23888 EUVD-2025-3506GHSA-m5hx-gg5v-rcw7

WordPress Custom Page Extensions Plugin <= 0.6 - Cross Site Scripting (XSS) vulnerability

Published Jan 24, 2025 · Updated May 11, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GrandSlambert Custom Page Extensions custom-page-extensions allows Reflected XSS.This issue affects Custom Page Extensions: from n/a through <= 0.6.

Affected products

VendorProductAffectedFixed
GrandSlambert Custom Page Extensions ≤ 0.6 —

References