CVE-2025-23851

Name of the Vulnerable Software and Affected Versions: NotFound Coronavirus (COVID-19) Outbreak Data Widgets versions 1.1.1 and earlier

Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This means that an attacker can inject malicious scripts into the web page, potentially leading to unauthorized actions on the user's behalf.

Recommendations: For versions 1.1.1 and earlier, update to a version that fixes the Improper Neutralization of Input During Web Page Generation issue to prevent Reflected XSS attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.