CVE-2025-13892 | MG AdvancedOptions Plugin up to 1.2 on WordPress $_SERVER[‘PHP_SELF’] cross site scripting

A vulnerability marked as problematic has been reported in MG AdvancedOptions Plugin up to 1.2 on WordPress. This vulnerability affects unknown code. The manipulation of the argument $_SERVER[‘PHP_SELF’] leads to cross site scripting.

This vulnerability is documented as CVE-2025-13892. The attack can be initiated remotely. There is not any exploit available.