A vulnerability has been found in NotificationX Plugin up to 3.2.0 on WordPress and classified as problematic. Affected by this issue is some unknown functionality. Performing a manipulation of the argument nx-preview results in cross site scripting.

This vulnerability is known as CVE-2025-15380. Remote exploitation of the attack is possible. No exploit is available.