CVE-2025-27295

CVE-2025-27295 corresponds to a Cross-Site Scripting (stored XSS) flaw in the WordPress plugin Live css (wpion Live css). Affected: Live css versions up to 1.3. Root cause: improper input neutralization during web page generation. Impact: stored XSS risk for page visitors; CVSS v3.1 base score 7....