CVE-2025-14154

creationtimestamp| type| source ---|---|--- 2025-12-17 07:43:07+00:00| seen| https://gist.github.com/Darkcrai86/8f5043694915c932c181ca0b8c37d17a 2025-12-17 08:02:49+00:00| seen| https://gist.github.com/Darkcrai86/87400f53808e788adf06df160e5800c6...

CVE-2025-14154 Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss <= 2.10.2 - Unauthenticated Stored Cross-Site Scripting

The Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss plugin for WordPress is vulnerable to Stored Cross-Site Scripting via guest display name in all versions up to, and including, 2.10.2 due to insufficient input sanitization and output escaping. This make...