cleantalk
Vulnerabilities and Security Researches

Easy Woocommerce Customizer, CVE-2025-59006

CVE, Research URL

CVE-2025-59006

Published on
Oct 22, 2025
Research Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themebon Easy Woocommerce Customizer easy-woocommerce-customizer allows Reflected XSS.This issue affects Easy Woocommerce Customizer: from n/a through <= 1.0.2.
Affected versions
max 1.0.2.
Status
vulnerable