Skip to content
OpenAdvisories
High · 7.1 CVE-2025-52778 EUVD-2025-19301GHSA-792w-m698-32wr

WordPress xili-dictionary plugin <= 2.12.5.2 - Cross Site Scripting (XSS) Vulnerability

Published Jun 27, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Michel - xiligroup dev xili-dictionary xili-dictionary allows Reflected XSS.This issue affects xili-dictionary: from n/a through <= 2.12.5.2.

Affected products

VendorProductAffectedFixed
Michel - xiligroup dev xili-dictionary ≤ 2.12.5.2 —

References