CVE-2025-26891
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Summary
CVE-2025-26891 is a Cross-site Scripting (XSS) vulnerability affecting the Ibtana theme in VW THEMES. The vulnerability, which is a type of improper input neutralization, allows attackers to inject malicious scripts into web pages generated by Ibtana. This stored XSS issue affects versions of Ibtana from n/a through 1.2.4.9, potentially exposing users to various cyberattacks. Attackers can exploit this vulnerability to steal user data, redirect users to malicious websites, or even take control of user sessions. Users are advised to update to the latest version of Ibtana to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.