CVE-2025-28933 — WordPress MaxA/B plugin <= 2.2.2 - CSRF to Stored XSS vulnerability

CVE-2025-28933

WordPress MaxA/B plugin <= 2.2.2 - CSRF to Stored XSS vulnerability PUBLISHED

Description (CNA)

Cross-Site Request Forgery (CSRF) vulnerability in maxfoundry MaxA/B maxab allows Stored XSS.This issue affects MaxA/B: from n/a through <= 2.2.2.

Vendor / product	Versions
maxfoundry / MaxA/B	affected 0 through 2.2.2

CWE-352

CISA-ADP

No English description supplied.

No references supplied.