← All advisories

Unrated severityNVD Advisory· Published Jul 2, 2026· Updated Jul 2, 2026

WordPress SpaLab | Beauty Salon WordPress Theme theme <= 6.7 - Cross Site Scripting (XSS) vulnerability

CVE-2025-69154

Description

Unauthenticated Cross Site Scripting (XSS) in SpaLab | Beauty Salon WordPress Theme <= 6.7 versions.

Affected products

1

WordPress/SpaLab | Beauty Salon WordPress Themellm-create
Range: <=6.7

Patches

Vulnerability mechanics

References

1

patchstack.com/database/wordpress/theme/spalab/vulnerability/wordpress-spalab-beauty-salon-wordpress-theme-theme-6-7-cross-site-scripting-xss-vulnerabilitymitrevdb-entry

News mentions

0

No linked articles in our index yet.