CVE-2025-28908

Name of the Vulnerable Software and Affected Versions: pipDisqus versions 1.6 and earlier

Description: The issue is related to improper neutralization of input during web page generation, which allows for Cross-site Scripting (XSS) attacks, specifically Stored XSS.

Recommendations: For versions 1.6 and earlier, update to a version that includes a fix for this issue, as no specific workaround is provided for these versions. At the moment, there is no information about a newer version that contains a fix for this vulnerability.