Cross-site Scripting Vulnerability in Orbit Fox by ThemeIsle
CVE-2025-22659

5.4MEDIUM

Key Information:

Vendor

Themeisle

Status
Orbit Fox By Themeisle
Vendor
CVE Published:
27 March 2025

What is CVE-2025-22659?

The vulnerability identified allows an attacker to exploit improper input neutralization during the generation of web pages in Orbit Fox by ThemeIsle. This leads to stored cross-site scripting (XSS) attacks, potentially allowing malicious scripts to be injected into web pages viewed by users. Versions of Orbit Fox prior to 2.10.44 are affected, making it crucial for users to update and safeguard their websites.

Affected Version(s)

Orbit Fox by ThemeIsle <= 2.10.44

References

https://patchstack.com/database/wordpress/plugin/themeisl...
vdb-entry

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Prissy (Patchstack Alliance)
.