CVE-2025-68566

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wphocus My auctions allegro my-auctions-allegro-free-edition allows Stored XSS.This issue affects My auctions allegro: from n/a through <= 3.6.32.

Credits

Muhammad Nur Ibnu Hubab | Patchstack Bug Bounty Program

References