CVE-2025-14797 | Same Category Posts Plugin up to 1.1.19 on WordPress Widget Title Placeholder htmlspecialchars_decode cross site scripting

A vulnerability was found in Same Category Posts Plugin up to 1.1.19 on WordPress. It has been declared as problematic. This affects the function htmlspecialchars_decode of the component Widget Title Placeholder. Such manipulation leads to cross site scripting.

This vulnerability is referenced as CVE-2025-14797. It is possible to launch the attack remotely. No exploit is available.