CVE-2025-62987

Name of the Vulnerable Software and Affected Versions Builderall Builder for WordPress versions through 3.0.1

Description The software contains an Improper Neutralization of Input During Web Page Generation issue, leading to a Stored Cross-site Scripting (XSS) condition. This allows for the injection of malicious scripts into web pages. The vulnerability exists in the Builderall Builderall Builder for WordPress builderall-cheetah-for-wp component. The issue allows for Stored XSS attacks.

Recommendations Update Builderall Builder for WordPress to a version later than 3.0.1.