PT-2025-39037
CVE-2025-59553
·
Published
2025-09-22
·
Updated
2025-09-22
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions
Coderz Studio Custom iFrame for Elementor versions through 1.0.13
Description
An issue exists in Coderz Studio Custom iFrame for Elementor that allows for DOM-Based Cross-site Scripting (XSS). The issue is due to improper neutralization of input during web page generation. This could allow an attacker to inject malicious scripts into web pages viewed by other users.
Recommendations
Update Coderz Studio Custom iFrame for Elementor to a version later than 1.0.13.
Found an issue in the description? Have something to add? Feel free to write us 👾