CVE-2025-25094

CVE-2025-25094 is a stored XSS in the WordPress plugin “Breaking News Ticker” (versions n/a–2.4.4) due to improper input neutralization during web page generation. The issue affects the Breaking News Ticker plugin and has a recorded CVSSv3.1 base score of 6.5 (Medium) with network attack vector, ...