CVE-2025-14552 | MediaPress Plugin up to 1.6.1 on WordPress Shortcode mpp-uploader cross site scripting

A vulnerability, which was classified as problematic, was found in MediaPress Plugin up to 1.6.1 on WordPress. Affected by this issue is the function mpp-uploader of the component Shortcode Handler. Executing a manipulation can lead to cross site scripting.

This vulnerability is registered as CVE-2025-14552. It is possible to launch the attack remotely. No exploit is available.