Cross-site Scripting Vulnerability in Golo Theme by UXPER

CVE-2025-54724

What is CVE-2025-54724?

The Golo theme by UXPER is susceptible to a Cross-site Scripting (XSS) vulnerability that enables attackers to inject malicious scripts into web pages. This vulnerability occurs due to improper sanitization of user inputs during web page generation. Attackers exploiting this flaw can potentially execute arbitrary scripts in users' browsers, leading to unauthorized actions or theft of sensitive information. Users and administrators of the Golo theme are advised to implement appropriate security measures and update to the latest versions to mitigate this threat.

References