Description
Cross-Site Request Forgery (CSRF) vulnerability in Olav Kolbu Google News allows Stored XSS. This issue affects Google News: from n/a through 2.5.1.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Olav Kolbu | Google News | ≤ 2.5.1 | — |
High · 7.1
CVE-2025-46452
EUVD-2025-12042GHSA-pj5f-6j55-4xcf
WordPress Google News plugin <= 2.5.1 - CSRF to Stored XSS vulnerability
Published Apr 24, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack