CVE-2025-24674

CVE-2025-24674 concerns Teplitsa ShMapper (WordPress plugin) where improper neutralization of input during web page generation allows Stored XSS in ShMapper versions up to 1.5.0. Public details consistently cite this as a Stored Cross-Site Scripting issue (authenticated context, per Wordfence ent...