CVE-2025-59593: WordPress Colibri Page Builder Plugin < 1.0.334 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Extend Themes Colibri Page Builder colibri-page-builder allows Stored XSS.This issue affects Colibri Page Builder: from n/a through < 1.0.334.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-59593?
CVE-2025-59593 is classified as a Stored Cross-site Scripting (XSS) vulnerability.
How do I fix CVE-2025-59593?
To mitigate CVE-2025-59593, update the Colibri Page Builder to version 1.0.334 or later.
What software is affected by CVE-2025-59593?
CVE-2025-59593 affects Extend Themes Colibri Page Builder and the WordPress Colibri Page Builder Plugin versions prior to 1.0.334.
What is the impact of CVE-2025-59593?
The impact of CVE-2025-59593 includes the potential for attackers to execute malicious scripts in the context of a user's browser.
Is CVE-2025-59593 a newly discovered vulnerability?
CVE-2025-59593 is a newly identified vulnerability that may affect users of certain outdated versions of Colibri Page Builder.