PT-2026-1485
CVE-2025-69357
·
Published
2026-01-06
·
Updated
2026-09-30
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions
CodexThemes TheGem Theme Elements (for Elementor) versions through 5.11.0
Description
TheGem Theme Elements (for Elementor) is susceptible to a Stored Cross-site Scripting (XSS) issue. This occurs due to improper neutralization of input during web page generation. An attacker could potentially inject malicious scripts into web pages, which could then be executed by unsuspecting users. TheGem Theme Elements (for Elementor) is affected.
Recommendations
Update TheGem Theme Elements (for Elementor) to a version later than 5.11.0.
Found an issue in the description? Have something to add? Feel free to write us 👾