CVE-2025-23620

Name of the Vulnerable Software and Affected Versions Captchelfie – Captcha by Selfie versions 1.0.7 and earlier

Description The issue is related to improper neutralization of input during web page generation, which allows reflected Cross-site Scripting (XSS). This means an attacker can inject malicious scripts into the website, potentially affecting users who access the compromised page.

Recommendations For versions 1.0.7 and earlier, update to a version later than 1.0.7 to resolve the issue. As a temporary workaround, consider restricting user input to minimize the risk of exploitation.