Vulnerability Research

CVE-2025-57520 – Stored XSS in Decap CMS (<= 3.8.3)

Stored XSS vulnerability in Decap CMS versions up to 3.8.3 allowing script injection through content fields. Includes PoC and remediation steps.