cleantalk
Vulnerabilities and Security Researches

Widgets as Shortcodes, CVE-2025-32117

CVE, Research URL

CVE-2025-32117

Application

Widgets as Shortcodes

Published on
Apr 08, 2025
Research Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in OTWthemes Widgetize Pages Light allows Reflected XSS. This issue affects Widgetize Pages Light: from n/a through 3.0.
Affected versions
Min -, max 5.9.10.
Status
vulnerable