← Back

Core Plugin For Kitestudio Themes

core_plugin_for_kitestudio_themes

Vendor: Kitestudio • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-1951
1Kitestudio
1Core Plugin For Kitestudio Themes
Jun 17, 2026
Jul 11, 2022
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The core plugin for kitestudio WordPress plugin before 2.3.1 does not sanitise and escape some parameters before outputting them back in a response of an AJAX action, available to both unauthenticated and authenticated u...Show more
The core plugin for kitestudio WordPress plugin before 2.3.1 does not sanitise and escape some parameters before outputting them back in a response of an AJAX action, available to both unauthenticated and authenticated users when a premium theme from the vendor is active, leading to a Reflected Cross-Site Scripting.Show less