CVE-2025-26747

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in 99colorthemes RainbowNews allows Stored XSS.This issue affects RainbowNews: from n/a through 1.0.7...

CVE-2025-26747

CVE-2025-26747 affects the RainbowNews WordPress theme (versions up to 1.0.7). The vulnerability is a Stored Cross-Site Scripting issue caused by improper neutralization of input during web page generation (XSS in RainbowNews). The RainbowNews entry in connected data lists RainbowNews