CVE-2026-57725

The vulnerability in Themeum Kirki allows for stored cross-site scripting (XSS) due to improper input neutralization during web page generation, affecting versions up to 6.0.11. This could enable attackers to inject malicious scripts that execute in the context of a user's session, potentially compromising sensitive data or user accounts. Organizations using affected versions of Kirki should prioritize patching to mitigate the risk of exploitation.