Reflected XSS Vulnerability in NooTheme Yogi - Health Beauty & Yoga

CVE-2025-54718

What is CVE-2025-54718?

A vulnerability exists in the NooTheme Yogi - Health Beauty & Yoga theme that allows for Reflected XSS attacks. This occurs due to improper handling of user input when generating web pages, which can be exploited by attackers to execute malicious scripts in the context of the victim's browser. Users of this theme, particularly those on versions up to and including 2.9.2, are at risk of having sensitive information compromised or being redirected to malicious sites. It is crucial for users to implement security measures and update to the latest version to mitigate these risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References