CVE-2025-11262: Unauthenticated Stored XSS in Link Whisper Free (CVSS 7.2)

CVE-2025-11262 is a CVSS 7.2 High severity Unauthenticated Stored XSS in Link Whisper Free. Any visitor can poison a REST endpoint to inject scripts that run in every admin's browser.