PT-2026-6333 · Blesta · Blesta

Egidio Romano · Published 2026-02-03 · Updated 2026-04-09 · CVE-2026-25616

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Blesta versions 3.x through 5.x before 5.13.3

Description The software does not properly validate input. This could allow for potential issues related to data handling.

Recommendations Update to version 5.13.3 or later.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2026-25616

Affected Products

Blesta

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2026-25616 · Security Note
• https://blesta.com/2026/01/28/security-advisory · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-25616 · Vendor Advisory
• http://seclists.org/fulldisclosure/2026/Feb/0 · Note
• https://twitter.com/VulmonFeeds/status/2019341883906936877 · Twitter Post
• https://t.me/cveNotify/152401 · Telegram Post
• https://t.me/cveNotify/150956 · Telegram Post
• https://twitter.com/pdnuclei_bot/status/2042316652885545032 · Twitter Post
• https://twitter.com/CVEnew/status/2018778322780459173 · Twitter Post