CVE-2025-54421

NamelessMC (NamelessMC) is affected by a stored XSS vulnerability in versions prior to 2.2.4, exploitable via the default_keywords crafted parameter. The issue affects authenticated remote users and allows injection of arbitrary web script/HTML. The vulnerability is fixed in version 2.2.4; upgrad...