CVE-2025-15678

The Nexter Blocks WordPress plugin is vulnerable before version 5.0.2 due to insufficient sanitization of uploaded SVG files. This allows any user who can upload files (Author by default) to submit an SVG containing JavaScript that executes when accessed, resulting in Stored XSS. Remediation: upg...