CVE-2025-64197

MediumCVSS 6.5

Published: 29/10/2025(UTC)Updated: 08/10/2026(UTC)Translated: 08/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.20%

10th percentile - higher than 10% of all known CVEs

Summary

A stored cross-site scripting vulnerability in Rehub theme (before 19.9.9.1) allows script injection during web page generation.

Risk Assessment

An attacker can inject malicious scripts that execute in users' browsers, potentially leading to data theft or session hijacking.

Recommendation

Update the Rehub theme to version 19.9.9.1 or later.

Other vulnerabilities in Rehub

CVE-2025-67565Medium
The Rehub theme from sizam is vulnerable to exposure of sensitive system information to unauthorized control sphere. This affects versions up to and including 19.9.9.1, allowing retrieval of embedded sensitive data.

Original NVD description (English source)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sizam Rehub rehub-theme allows Stored XSS.This issue affects Rehub: from n/a through < 19.9.9.1.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS