Stored Cross-Site Scripting Flaw in Appzend Theme for WordPress

CVE-2025-5587

What is CVE-2025-5587?

The Appzend theme for WordPress has a vulnerability that allows authenticated attackers, with Contributor-level access and above, to exploit a Stored Cross-Site Scripting (XSS) weakness through the 'progressbarLayout' parameter. This occurs due to inadequate input sanitization and output escaping measures in versions up to and including 1.2.6. Upon successful exploitation, attackers can inject arbitrary web scripts that will run when users access compromised pages, potentially leading to serious security and privacy implications.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References