CVE-2025-12090

CVE-2025-12090 : WordPress plugin Employee Spotlight – Team Member Showcase & Meet the Team prior to 5.1.3 is vulnerable to Stored Cross-Site Scripting via Social URLs. Exploitation requires authenticated access at least at the Contributor level; attackers can inject scripts that run when users v...