CVE-2025-15690

CVE-2025-15690 is a Stored Cross-Site Scripting (XSS) vulnerability in the Content Mask WordPress plugin, affecting versions 1.7.1 through 1.8.5.5 . The root cause is improper sanitization and escaping of post content—specifically scripts and styles submitted by an author—before being output in g...