Skip to content
OpenAdvisories
High · 7.1 CVE-2025-68848 EUVD-2025-207589GHSA-rv4c-25xc-4f6g

WordPress amr cron manager plugin <= 2.3 - Reflecte dCross Site Scripting (XSS) vulnerability

Published Feb 20, 2026 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: anmari Product: amr cron manager

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in anmari amr cron manager amr-cron-manager allows Reflected XSS.This issue affects amr cron manager: from n/a through <= 2.3.

Affected products

VendorProductAffectedFixed
anmari amr cron manager ≤ 2.3 —

References