Published April 10, 2026 · Updated April 10, 2026
CVE-2025-58920 is a high-severity vulnerability in Zootemplate Cerato (versions prior to 2.2.18) that allows for reflected cross-site scripting (XSS). This flaw enables an attacker to inject malicious scripts into web pages viewed by users, potentially compromising their data or session information. To mitigate this risk, upgrade to Zootemplate Cerato version 2.2.19 or later and implement input validation and sanitization for user-generated content.
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Zootemplate Cerato allows Reflected XSS.This issue affects Cerato: from n/a through 2.2.18.
CVE-2025-58920 is a high-severity reflected XSS vulnerability affecting Zootemplate Cerato versions prior to 2.2.19. Users are at risk of script injection, compromising data security. Upgrade to version 2.2.19 and enforce input validation measures to protect against exploitation.