Stored Cross-Site Scripting in WP Scriptcase Plugin for WordPress

CVE-2025-8691

What is CVE-2025-8691?

The WP Scriptcase plugin for WordPress is susceptible to a Stored Cross-Site Scripting attack due to inadequate input sanitization and output escaping. This vulnerability affects all versions up to and including 2.0.0, allowing authenticated attackers with Contributor-level access or higher to inject malicious web scripts. These scripts can be executed when users access the compromised pages, potentially leading to unauthorized actions and data exposure.

References