Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nelio Software Nelio Popups nelio-popups allows Stored XSS.This issue affects Nelio Popups: from n/a through <= 1.3.0.
Metrics
Affected Vendors & Products
No data.
No data.
No data.
No data.
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Fri, 21 Nov 2025 12:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nelio Software Nelio Popups nelio-popups allows Stored XSS.This issue affects Nelio Popups: from n/a through <= 1.3.0. | |
| Title | WordPress Nelio Popups plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability | |
| Weaknesses | CWE-79 | |
| References |
|
MITRE
Status: PUBLISHED
Assigner: Patchstack
Published:
Updated: 2025-11-21T12:30:05.445Z
Reserved: 2025-11-21T11:21:20.345Z
Link: CVE-2025-66111
Vulnrichment
No data.
NVD
Status : Awaiting Analysis
Published: 2025-11-21T13:15:52.840
Modified: 2025-11-21T15:13:13.800
Link: CVE-2025-66111
Redhat
No data.
OpenCVE Enrichment
No data.