CVE-2025-26998

Summary

CVE-2025-26998 is a Cross-Site Scripting (XSS) vulnerability affecting SKT Blocks – Gutenberg based Page Builder. The flaw arises from improper neutralization of user input during web page generation. An attacker can exploit this issue to inject and execute malicious scripts in a victim's web browser, potentially leading to data theft or unauthorized access. This vulnerability, which allows Stored XSS, affects SKT Blocks – Gutenberg based Page Builder versions 1.8 and below, putting numerous users at risk. It is essential to update the software to a secure version as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.