CVE-2025-25973

Ppress version 0.0.9 is affected by a stored Cross-Site Scripting (XSS) vulnerability within its "related recommendations" feature. A remote attacker can execute arbitrary code by providing a crafted script through the article.title, article.category, and article.tags parameters. As a temporary w...