CVE-2025-22780

Name of the Vulnerable Software and Affected Versions wp-pano versions 1.17 and earlier

Description The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting', which allows Stored XSS. This means an attacker can inject malicious scripts into the website, potentially affecting users who visit the compromised page.

Recommendations For wp-pano versions 1.17 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.