CVE-2025-23998 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in raratheme UltraLight the-ultralight allows Reflected XSS.T…
Medium CVSS: 6.1

CVE-2025-23998

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in raratheme UltraLight the-ultralight allows Reflected XSS.This issue affects UltraLight: from n/a through <= 1.2.
Vendor
Rarathemes
Product
The Ultralight
CWE
CWE-79
Yayın Tarihi
2025-01-21 14:15:13
Güncelleme
2026-04-01 17:17:35
Source Identifier
audit@patchstack.com
KEV Date Added
-

Kategoriler

CWE-79 The Ultralight MEDIUM Rarathemes 2025

Referanslar

https://patchstack.com/database/Wordpress/Theme/the-ultralight/vulnerability/wordpress-ultralight-theme-1-2-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve