CVE-2026-25354 WordPress Reebox theme < 1.4.8 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in skygroup Reebox reebox allows Reflected XSS.This issue affects Reebox: from n/a through 1.4.8...

CVE-2026-25354

CVE-2026-25354 affects the WordPress Reebox theme (versions prior to 1.4.8). The Root Cause is improper neutralization of input during web page generation, resulting in a Reflected XSS vulnerability. Impact per sources is that arbitrary scripts can be injected into web pages when a user visits a ...

WordPress Reebox theme < 1.4.8 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Reebox versions 1.4.8...