Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-68992 EUVD-2025-205744GHSA-wmpp-wmx8-8xhj

WordPress BWL Knowledge Base Manager plugin <= 1.6.3 - Cross Site Scripting (XSS) vulnerability

Published Dec 30, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: xenioushk Product: BWL Knowledge Base Manager

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in xenioushk BWL Knowledge Base Manager bwl-kb-manager allows Stored XSS.This issue affects BWL Knowledge Base Manager: from n/a through <= 1.6.3.

Affected products

VendorProductAffectedFixed
xenioushk BWL Knowledge Base Manager ≤ 1.6.3 —

References