Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-66090 EUVD-2025-198458GHSA-jw6h-h7r6-gcp8

WordPress SKT Skill Bar plugin <= 2.5 - Cross Site Scripting (XSS) vulnerability

Published Nov 21, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sonalsinha21 SKT Skill Bar skt-skill-bar allows DOM-Based XSS.This issue affects SKT Skill Bar: from n/a through <= 2.5.

Affected products

VendorProductAffectedFixed
sonalsinha21 SKT Skill Bar ≤ 2.5 —

References