CVE-2026-25307

Name of the Vulnerable Software and Affected Versions 8theme XStore Core versions prior to 5.7

Description The 8theme XStore Core et-core-plugin contains a flaw related to improper input handling during web page generation, specifically a DOM-Based Cross-Site Scripting issue. This allows for the potential execution of malicious scripts within the context of a user's browser. The vulnerability exists due to insufficient sanitization of user-supplied data used in the generation of web pages. The affected component is the et-core-plugin.

Recommendations Update 8theme XStore Core to version 5.7 or later.