CVE-2025-31805
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Apr 1, 2025
CWE ID 79
Summary
CVE-2025-31805 is a Cross-site Scripting (XSS) vulnerability affecting ExpressTech Systems' Gutena Kit – Gutenberg Blocks and Templates. The flaw, which allows stored XSS attacks, stems from improper neutralization of user inputs during web page generation. This issue impacts versions of the product from n/a to 2.0.7. Successful exploitation could lead to unauthorized script injection and potential data theft or website defacement. Users are advised to update to the latest version and follow secure coding practices to mitigate the risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.