CVE-2025-25071

CVE-2025-25071 : CSRF to Stored XSS in the WordPress plugin Vignette Ads (versions n/a through 0.2). The vulnerability is triggered via Cross-Site Request Forgery in the plugin, with the impact being stored XSS as reported in multiple sources (WordPress/NVD, Patchstack entries). Affected product/...