PT-2025-53097 · Hasthemes · C++ Builder

Published 2025-12-24 · Updated 2025-12-25 · CVE-2025-68533

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions HasThemes WC Builder versions through 1.2.0

Description A flaw exists in HasThemes WC Builder that allows for Stored Cross-Site Scripting (XSS). This occurs due to improper neutralization of input during web page generation. The issue allows an attacker to inject malicious scripts into web pages. The affected component is wc-builder.

Recommendations Update HasThemes WC Builder to a version later than 1.2.0.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-68533

Affected Products

C++ Builder

References · 6

• https://osv.dev/vulnerability/CVE-2025-68533 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-68533 · Security Note
• https://twitter.com/CVEnew/status/2004294929149759793 · Twitter Post
• https://t.me/CVEtracker/40581 · Telegram Post
• https://vdp.patchstack.com/database/Wordpress/Plugin/wc-builder/vulnerability/wordpress-wc-builder-plugin-1-2-0-cross-site-scripting-xss-vulnerability?_s_id=cve · Note
• https://patchstack.com/database/Wordpress/Plugin/wc-builder/vulnerability/wordpress-wc-builder-plugin-1-2-0-cross-site-scripting-xss-vulnerability?_s_id=cve · Note