CVE-2025-2577

CVE-2025-2577 : Bitspecter Suite for WordPress is vulnerable to a stored cross-site scripting (XSS) via SVG file uploads in all versions up to and including 1.0.0. The root cause is insufficient input sanitization and output escaping, allowing an authenticated attacker with Author+ privileges to ...