CVE-2025-62137

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in shuttlethemes Shuttle shuttle allows Stored XSS.This issue affects Shuttle: from n/a through = 1.5.0...

CVE-2025-62137

CVE-2025-62137 is a Stored Cross-Site Scripting vulnerability in Shuttle (Shuttle theme) caused by improper neutralization of input during web page generation. Affected: Shuttle theme versions up to 1.5.0 (listed as affected). Connected sources indicate this CVE in Wordfence’ WordPress vulnerabil...