CVE-2026-25616

Summary

Blesta 3.x through 5.x before 5.13.3 mishandles input validation, aka CORE-5665.

Affected Software

Weaknesses

• CWE-79: CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

CVE Program Container

Additional References

• http://seclists.org/fulldisclosure/2026/Feb/0

References

• https://www.blesta.com/2026/01/28/security-advisory/

• ←Previous
• Next→