Description
Unauthenticated Cross Site Scripting (XSS) in Avante < 3.0.5 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ThemeGoods | Avante | < 3.0.5 | 3.0.5 |
High · 7.1
CVE-2025-68524
EUVD-2025-210251GHSA-8xjg-38xf-pjc5
WordPress Avante theme < 3.0.5 - Reflected Cross Site Scripting (XSS) vulnerability
Published Jun 17, 2026 · Updated Jun 17, 2026 · Assigned by Patchstack