CVE-2025-9540

Publication date

2025-09-22 06:00:14

Family

WPScan

State

PUBLISHED

Description

The Markup Markdown WordPress plugin before 3.20.10 allows links to contain JavaScript which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.