CVE-2025-25973

A stored Cross-Site Scripting (XSS) vulnerability exists in the "related recommendations" feature of the Ppress blogging CMS (version 0.0.9 ). This flaw allows a remote attacker to execute arbitrary code by injecting a crafted script through the article.title, article.category, and article.tags p...

CVE-2025-25973

A stored Cross Site Scripting vulnerability in the "related recommendations" feature in Ppress v.0.0.9 allows a remote attacker to execute arbitrary code via a crafted script to the article.title, article.category, and article.tags parameters...

CVE-2021-24954

The User Registration, Login Form, User Profile & Membership WordPress plugin before 3.2.3 does not sanitise and escape the ppressccdata parameter before outputting it back in an attribute of an admin dashboard page, leading to a Reflected Cross-Site Scripting issue...

PT-2021-16383

Name of the Vulnerable Software and Affected Versions: User Registration, Login Form, User Profile & Membership WordPress plugin versions prior to 3.2.3 Description: The issue arises from the failure to sanitise and escape the ppress cc data parameter before outputting it back in an attribute of ...