CVE-2025-1454

The Ninja Pages WordPress plugin, in versions 1.4.2 and earlier , is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to properly sanitize and escape certain plugin settings. This vulnerability allows high-privilege users, such as administrators, to perform XSS atta...