VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Feb 20, 2025· Updated Jun 17, 2026

CVE-2025-25973

CVE-2025-25973

Description

A stored Cross Site Scripting vulnerability in the "related recommendations" feature in Ppress v.0.0.9 allows a remote attacker to execute arbitrary code via a crafted script to the article.title, article.category, and article.tags parameters.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • PPress/PPressllm-fuzzy2 versions
    =0.0.9+ 1 more
    • (no CPE)range: =0.0.9
    • (no CPE)
  • Yandaozi/PPress
    cpe:2.3:a:yandaozi:ppress:0.0.9:beta:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.