Advanced Faq Manager Vulnerabilities

[en] Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeHigh Advanced FAQ Manager advanced-faq-manager allows Stored XSS.This issue affects Advanced FAQ Manager: from n/a through <= 1.5.2.

Affected:

up to 1.5.2

Fix:

No patched version reported

Disclosed:

Dec 9, 2025

CVE-2025-67556 on NVD →

[en] Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeHigh Advanced FAQ Manager advanced-faq-manager allows DOM-Based XSS.This issue affects Advanced FAQ Manager: from n/a through <= 1.5.2.

Affected:

up to 1.5.2

Fix:

No patched version reported

Disclosed:

Dec 9, 2025

CVE-2025-67553 on NVD →

The Advanced FAQ Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.5.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with author-level access and above, to inject arbitrary web scripts in pages...

CVSS:

6.4

Affected:

up to 1.5.2

Fixed in:

1.5.3

Disclosed:

Dec 6, 2025

CVE-2025-67556 on NVD →

The Advanced FAQ Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.5.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in p...

CVSS:

6.4

Affected:

up to 1.5.2

Fixed in:

1.5.3

Disclosed:

Oct 24, 2025

CVE-2025-67553 on NVD →