Skip to content
OpenAdvisories
High · 7.1 CVE-2025-53289 EUVD-2025-25992GHSA-j583-32vf-crpq

WordPress Theme Blvd Widget Areas Plugin <= 1.3.0 - Cross Site Scripting (XSS) Vulnerability

Published Aug 28, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Jason Product: Theme Blvd Widget Areas Category: Web / CMS

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jason Theme Blvd Widget Areas theme-blvd-widget-areas allows Reflected XSS.This issue affects Theme Blvd Widget Areas: from n/a through <= 1.3.0.

Affected products

VendorProductAffectedFixed
Jason Theme Blvd Widget Areas ≤ 1.3.0 —

References