← All advisories

High severity7.1NVD Advisory· Published Jun 3, 2026· Updated Jun 4, 2026

CVE-2025-15654

CVE-2025-15654

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Fox-themes Prague allows Reflected XSS.

This issue affects Prague: from n/a through 2.2.8.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

1

WordPress/Praguellm-fuzzy
Range: <=2.2.8

Patches

Vulnerability mechanics

References

1

patchstack.com/database/wordpress/plugin/prague-plugins/vulnerability/wordpress-prague-plugin-2-2-8-cross-site-scripting-xss-vulnerabilitynvd

News mentions

0

No linked articles in our index yet.