/Vulnerability Library

Blesta <= 5.13.1 - Cross-Site Scripting

CVE-2026-25616
Verified

Description

Blesta 3.x through 5.x before 5.13.3 contains an input validation vulnerability caused by mishandling input, letting attackers potentially exploit the system, exploit requires unspecified conditions.

Severity

Medium

CVSS Score

6.1

Exploit Probability

0%

Published Date

April 8, 2026

Template Author

0x_akoko

CVE-2026-25616.yaml
6.1Score

CVSS Metrics

CVSS Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVE ID:
cve-2026-25616
CWE ID:
cwe-79

References

https://karmainsecurity.com/KIS-2026-01https://www.blesta.com/2026/01/28/security-advisory/https://nvd.nist.gov/vuln/detail/CVE-2026-25616

Remediation Steps

Upgrade to version 5.13.3 or later.