TI-2025-04976 CVE-2025-5536 · GHSA-j8x8-9q6w-xh64
Freemind Viewer <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Priority LOW 28
The Freemind Viewer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'freemind' shortcode in all versions up to, and including, 1.0 due to insufficient input sanitization and output esca…