CVE-2025-0692

The Simple Video Management System WordPress plugin (versions 1.0.0 through 1.0.4 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to properly sanitise and escape certain plugin settings, which allows high-privilege users, such as administrators, to perform XSS...