CVE · Medium
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2025-58593 | Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More [themeisle-companion] < 3.0.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.5 | < 3.0.1 | 3.0.1 | 2025-09-03 | — |
The Orbit Fox plugin by ThemeIsle, versions up to 3.0.0, is susceptible to stored cross-site scripting (XSS) due to inadequate input sanitization and output escaping. Authenticated attackers with at least contributor-level access can inject malicious scripts that will run whenever other users view the affected pages.
Based on public CVE data (MITRE/NVD).
No signup, no credit card — enter your URL and get a security report in seconds.