CVE-2025-12935

FluentCRM WordPress plugin (versions up to and including 2.9.84) contains a stored XSS vulnerability via the fluentcrm_content shortcode. The issue arises from insufficient input sanitization and output escaping of user-supplied attributes, enabling authenticated users with contributor-level acce...