Cross-site Scripting Vulnerability in WCS QR Code Generator by Luke America

CVE-2025-23864

What is CVE-2025-23864?

The WCS QR Code Generator plugin by Luke America is susceptible to a Cross-site Scripting (XSS) vulnerability, specifically allowing for stored attacks. When untrusted input is not properly neutralized before being returned to users, it can allow attackers to inject malicious scripts into web pages. This can lead to unauthorized access to user data and other harmful consequences for website visitors. It is crucial for users of WCS QR Code Generator to review their plugins and apply necessary updates to safeguard their websites against potential attacks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References