PT-2025-36144 · Otwthemes · Otwthemes Widgetize Pages Light

Que Thanh Tuan - Blue Rock · Publicado 2025-09-05 · Atualizado 2025-09-05 · CVE-2025-58805

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Média

Vetor base

AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions OTWthemes Widgetize Pages Light versions through 3.0

Description The software contains an Improper Neutralization of Input During Web Page Generation, which results in a Stored Cross-Site Scripting (XSS) issue.

Recommendations Update OTWthemes Widgetize Pages Light to a version later than 3.0.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2025-58805

Produtos afetados

Otwthemes Widgetize Pages Light

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-58805 · Nota de Segurança
• https://patchstack.com/database/wordpress/plugin/widgetize-pages-light/vulnerability/wordpress-widgetize-pages-light-plugin-3-0-cross-site-scripting-xss-vulnerability?_s_id=cve · Nota
• https://twitter.com/CVEnew/status/1964018363799392623 · Publicação no Twitter
• https://patchstack.com/database/Wordpress/Plugin/widgetize-pages-light/vulnerability/wordpress-widgetize-pages-light-plugin-3-0-cross-site-scripting-xss-vulnerability?_s_id=cve · Nota