CVE-2025-23744

Name of the Vulnerable Software and Affected Versions: dvs11 Random Posts, Mp3 Player + ShareButton versions n/a through 1.4.1

Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS in the dvs11 Random Posts, Mp3 Player + ShareButton.

Recommendations: For versions n/a through 1.4.1, consider disabling the Reflected XSS vulnerable functionality until a patch is available. Restrict access to user-input data in the web page generation process to minimize the risk of exploitation. Avoid using user-input data in the generation of web pages until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.