Description
Unauthenticated Cross Site Scripting (XSS) in SpaLab | Beauty Salon WordPress Theme <= 6.7 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| designthemes | SpaLab | Beauty Salon WordPress Theme | ≤ 6.7 | — |
High · 7.1
CVE-2025-69154
EUVD-2025-210406GHSA-wr8f-c78x-3pvx
WordPress SpaLab | Beauty Salon WordPress Theme theme <= 6.7 - Cross Site Scripting (XSS) vulnerability
Published Jul 2, 2026 · Updated Jul 2, 2026 · Assigned by Patchstack