CVE-2025-30902

UNKNOWN 0.0

WordPress AEC Kiosque plugin <= 1.9.3 - Reflected Cross Site Scripting (XSS) vulnerability

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ATL Software SRL AEC Kiosque aec-kiosque allows Reflected XSS.This issue affects AEC Kiosque: from n/a through <= 1.9.3.

CWE	CWE-79
Vendor	atl software srl
Product	aec kiosque
Published	Apr 1, 2025
Last Updated	Apr 1, 2026

Stay Ahead of the Next One

Get instant alerts for atl software srl aec kiosque

Be the first to know when new unknown vulnerabilities affecting atl software srl aec kiosque are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

ATL Software SRL / AEC Kiosque

0 ≤ 1.9.3

References

NVD ↗ CVE.org ↗ EPSS Data ↗

patchstack.com: https://patchstack.com/database/Wordpress/Plugin/aec-kiosque/vulnerability/wordpress-aec-kiosque-plugin-1-9-3-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve

Credits

stealthcopter | Patchstack Bug Bounty Program