PT-2025-43297

CVE-2025-59593

·

Published

2025-09-22

·

Updated

2026-10-23

Description by

CVSS 3.1
5.9
Medium
MetricsAV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions Extend Themes Colibri Page Builder versions prior to 1.0.334
Description The Colibri Page Builder software contains a flaw related to improper input handling during web page generation, which can lead to Cross-site Scripting (XSS). This allows for the injection of malicious scripts into web pages. The issue is identified as Stored XSS, meaning the malicious script is persistently stored on the target server.
Recommendations Update Extend Themes Colibri Page Builder to version 1.0.334 or later.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾