PT-2025-53097
CVE-2025-68533
·
Published
2025-12-24
·
Updated
2025-12-27
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions
HasThemes WC Builder versions through 1.2.0
Description
A flaw exists in HasThemes WC Builder that allows for Stored Cross-Site Scripting (XSS). This occurs due to improper neutralization of input during web page generation. The issue allows an attacker to inject malicious scripts into web pages. The affected component is
wc-builder.Recommendations
Update HasThemes WC Builder to a version later than 1.2.0.
Found an issue in the description? Have something to add? Feel free to write us 👾