Skip to content
Sign in
6.5 Medium

CVE-2025-31767 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in OTWthemes Post…

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in OTWthemes Post Custom Templates Lite post-custom-templates-lite allows Stored XSS.This issue affects Post Custom Templates Lite: from n/a through <= 1.14.

Affected products and versions

Product Affected versions Fixed in
Post Custom Templates Lite 1.14 earliest → 1.14 No fix stated

Other CVEs of Post Custom Templates Lite

The 2 CVEs of Post Custom Templates Lite →
CVE-2025-30942 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in OTWthemes Post… 5.9 Medium
Track this CVE