Skip to content
OpenAdvisories
Medium · 5.9 CVE-2025-30938 EUVD-2025-17208GHSA-vr7m-g7mw-78wm

WordPress Broadly for WordPress plugin <= 3.0.2 - Cross Site Scripting (XSS) Vulnerability

Published Jun 6, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in broadly Broadly for WordPress broadly allows Stored XSS.This issue affects Broadly for WordPress: from n/a through <= 3.0.2.

Affected products

VendorProductAffectedFixed
broadly Broadly for WordPress ≤ 3.0.2 —

References