Cross-site Scripting Vulnerability in Golo Theme by UXPER
CVE-2025-54724
What is CVE-2025-54724?
The Golo theme by UXPER is susceptible to a Cross-site Scripting (XSS) vulnerability that enables attackers to inject malicious scripts into web pages. This vulnerability occurs due to improper sanitization of user inputs during web page generation. Attackers exploiting this flaw can potentially execute arbitrary scripts in users' browsers, leading to unauthorized actions or theft of sensitive information. Users and administrators of the Golo theme are advised to implement appropriate security measures and update to the latest versions to mitigate this threat.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Golo <= 1.7.1
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved