CVE-2025-14035

Name of the Vulnerable Software and Affected Versions DebateMaster versions prior to 1.0.1

Description Stored Cross-Site Scripting occurs due to insufficient input sanitization and output escaping within the color options of the plugin settings. Authenticated attackers with Administrator-level access or higher can inject arbitrary web scripts into pages. These scripts execute when a user accesses a page containing the debate shortcode. This issue specifically affects multi-site installations and environments where unfiltered html has been disabled.

Recommendations Update DebateMaster to a version later than 1.0.0.