Vulnerabilities (CVE)

Filtered by vendor Yandaozi Subscribe
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-25973 1 Yandaozi 1 Ppress 2025-09-23 N/A 6.5 MEDIUM
A stored Cross Site Scripting vulnerability in the "related recommendations" feature in Ppress v.0.0.9 allows a remote attacker to execute arbitrary code via a crafted script to the article.title, article.category, and article.tags parameters.