VULNERABILITY INTELLIGENCE

CVE-2025-68878

CVSS score7.1 HIGH

EPSS probability0.18%

CISA KEVNot currently listed

Published2025-12-29

Last modified2026-10-07

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in prasadkirpekar Advanced Custom CSS advanced-custom-css allows Reflected XSS.This issue affects Advanced Custom CSS: from n/a through <= 1.1.0.