Skip to content
6.5 Medium

CVE-2025-32182 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Spider Themes…

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Spider Themes Spider Elements spider-elements allows Stored XSS.This issue affects Spider Elements: from n/a through <= 1.6.5.

Affected products and versions

Product Affected versions Fixed in
Spider Elements – Addons for Elementor 1.6 earliest → 1.6.2 No fix stated
Spider Elements 1.6 earliest → 1.6.5 No fix stated
The 2 CVEs of Spider Elements – Addons for Elementor →
Track this CVE