CVE-2025-54055

CVE-2025-54055 is a Reflected XSS in WordPress theme Druco (skygroup Druco) up to version 1.5.2, caused by improper input neutralization during web page generation. Affected: Druco (skygroup) WordPress Theme up to 1.5.2. Impact per sources: allow execution of attacker-controlled scripts in the vi...

PT-2025-34017 · Skygroup · Druco

Name of the Vulnerable Software and Affected Versions: skygroup Druco versions through 1.5.2 Description: Improper neutralization of input during web page generation allows reflected cross-site scripting XSS. Recommendations: At the moment, there is no information about a newer version that...