CVE-2025-10737 | Open Source Genesis Framework Theme Plugin up to 3.6.0 on WordPress Shortcode cross site scripting

October 24, 2025 Yanac

A vulnerability has been found in Open Source Genesis Framework Theme Plugin up to 3.6.0 on WordPress and classified as problematic. Impacted is an unknown function of the component Shortcode Handler. Performing manipulation results in cross site scripting.

This vulnerability is cataloged as CVE-2025-10737. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More