CVE-2025-10357

The Simple SEO WordPress plugin (versions before 2.0.32 ) is vulnerable to Stored Cross-Site Scripting (XSS) due to a lack of proper sanitization and escaping of user-supplied parameters when outputting them on a page. An attacker with a role as low as contributor can inject a carefully crafted p...