CVE-2025-15690

The Content Mask WordPress plugin in versions 1.7.1 through 1.8.5.5 is vulnerable to a Stored Cross-Site Scripting (XSS) flaw. The issue stems from the plugin's failure to properly sanitise and escape content submitted with a post before it is rendered on generated pages. This allows users with p...