CVE-2025-22792: WordPress Js O3 Lite theme <= 1.5.8.2 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jinwen Js O3 Lite allows Reflected XSS.This issue affects Js O3 Lite: from n/a through 1.5.8.2.
Other sources
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jinwen Js O3 Lite js-o3-lite allows Reflected XSS.This issue affects Js O3 Lite: from n/a through <= 1.5.8.2.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-22792?
CVE-2025-22792 is classified as a Reflected Cross-Site Scripting (XSS) vulnerability, which poses a significant risk to users.
How do I fix CVE-2025-22792?
To fix CVE-2025-22792, upgrade the Jinwen Js O3 Lite to the latest version beyond 1.5.8.2 that addresses the XSS vulnerability.
What versions of Jinwen Js O3 Lite are affected by CVE-2025-22792?
CVE-2025-22792 affects Jinwen Js O3 Lite from its initial release up to and including version 1.5.8.2.
Who is impacted by CVE-2025-22792?
Users of Jinwen Js O3 Lite and the WordPress Js O3 Lite theme versions up to 1.5.8.2 are impacted by CVE-2025-22792.
What types of attacks can CVE-2025-22792 facilitate?
CVE-2025-22792 can facilitate Reflected Cross-Site Scripting attacks, allowing malicious actors to execute scripts in the context of a victim's browser.