Stored Cross-Site Scripting Vulnerability in Advanced Accordion Gutenberg Block Plugin for WordPress

CVE-2025-2543

What is CVE-2025-2543?

The Advanced Accordion Gutenberg Block plugin for WordPress is susceptible to stored cross-site scripting attacks through SVG file uploads due to inadequate input sanitization and output escaping. This vulnerability allows authenticated users with Author-level access and above to inject harmful web scripts into pages, which can be executed whenever a visitor accesses the affected SVG file. Ensuring all versions of the plugin are updated is crucial to mitigate these risks and protect user data.

References