Description

Cross-Site Request Forgery (CSRF) vulnerability in ThemeFarmer Ultimate Subscribe ultimate-subscribe allows Reflected XSS.This issue affects Ultimate Subscribe: from n/a through <= 1.3.

INFO

Published Date :

2025-01-22T14:29:22.338Z

Last Modified :

2026-04-01T15:43:17.071Z

Source :

Patchstack
AFFECTED PRODUCTS

The following products are affected by CVE-2025-23806 vulnerability.

No data.

REFERENCES

CVSS Vulnerability Scoring System