CVE-2025-25973

A stored Cross-Site Scripting (XSS) vulnerability exists in the "related recommendations" feature of the Ppress blogging CMS (version 0.0.9 ). This flaw allows a remote attacker to execute arbitrary code by injecting a crafted script through the article.title, article.category, and article.tags p...