PT-2025-44243 · Rehub · Rehub

CVE-2025-64197 · Publicado 2025-10-29 · Atualizado 2025-10-29

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions sizam Rehub rehub-theme versions prior to 19.9.9.1

Description The software contains an Improper Neutralization of Input During Web Page Generation issue, specifically a Stored Cross-site Scripting (XSS) condition. This allows for the injection of malicious scripts through web pages. The issue affects the Rehub theme.

Recommendations Update to version 19.9.9.1 or later.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2025-64197

Produtos afetados

Rehub

Referências · 4

• https://vdp.patchstack.com/database/Wordpress/Theme/rehub-theme/vulnerability/wordpress-rehub-theme-19-9-9-1-cross-site-scripting-xss-vulnerability?_s_id=cve · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-64197 · Nota de Segurança
• https://twitter.com/VulmonFeeds/status/1983527908573323315 · Publicação no Twitter
• https://vdp.patchstack.com/database/Wordpress/Theme/rehub-theme/vulnerability/wordpress-rehub-theme-19-9-9-1-cross-site-scripting-xss-vulnerability · Nota