CVE-2025-2699

CVE-2025-2699 affects GetmeUK ContentTools (up to version 1.6.16). The root cause is a cross-site scripting (XSS) vulnerability in the Image Handler component triggered by manipulation of the onload argument, allowing remote exploitation. Public exploit information exists. Affected environments a...