CVE-2025-58920

CVE-2025-58920 corresponds to a Reflected Cross-Site Scripting (XSS) vulnerability in the WordPress Cerato theme (Cerato) versions up to 2.2.18. The issue is described as an Improper Neutralization of Input During Web Page Generation. Affected product: WordPress Cerato theme; affected range: