Stored Cross-Site Scripting in Visualizer: Tables and Charts Manager Plugin for WordPress

CVE-2025-1065

What is CVE-2025-1065?

The Visualizer: Tables and Charts Manager plugin for WordPress is susceptible to Stored Cross-Site Scripting due to inadequate input validation and output sanitization in its Import Data From File feature. This vulnerability allows authenticated users with contributor-level access or higher to inject malicious scripts. These scripts execute when other users access affected pages, potentially compromising the integrity and confidentiality of data within the application.

References