Cross-Site Scripting Vulnerability in Genetech Products Web and WooCommerce Addons for WPBakery Builder
CVE-2025-62748

6.5MEDIUM

What is CVE-2025-62748?

A security vulnerability has been identified in Genetech Products Web and WooCommerce Addons for WPBakery Builder. This issue arises from improper neutralization of input during web page generation, resulting in a DOM-Based XSS vulnerability. Attackers can exploit this flaw to execute arbitrary scripts in the context of users' browsers, leading to potential data theft, session hijacking, and other malicious activities. Users of versions from n/a through 1.5 should take immediate action to mitigate the risks associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Affected Version(s)

Web and WooCommerce Addons for WPBakery Builder <= 1.5

References

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Muhammad Yudha - DJ | Patchstack Bug Bounty Program
.