CVE-2025-23682

CVE-2025-23682 is a high vulnerability published on January 22, 2025. Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bhuvnesh Gupta Preloader Quotes preloader-quotes allows Reflected XSS.This issue affects Preloader Quotes: from n/a through <= 1.0.0.

CVE-2025-23682 was first published in the National Vulnerability Database on January 22, 2025, with the most recent update on April 23, 2026. EchelonGraph re-ingests CVE updates from NVD on a 2-hour cycle, so this page reflects the latest published state.

CVE-2025-23682 is not currently on CISA's Known Exploited Vulnerabilities catalog. FIRST EPSS estimates a 27.7% percentile likelihood of exploitation in the next 30 days — higher percentiles indicate greater predicted risk.

CVE-2025-23682 has a CVSS v3 base score of 7.1 (NVD).

Patch to the fixed version published by the affected vendor. Where vendor advisories exist for CVE-2025-23682, EchelonGraph cross-links them in the Vendor Advisories panel below — those typically contain the canonical remediation steps, fixed version numbers, and any vendor-specific mitigations.