Kitestudio

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Kitestudio records in CISA KEV

No Kitestudio vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Core Plugin For Kitestudio Themes 1 record LOW

Records

1 record in Core Plugin For Kitestudio Themes · all components

TI-2022-01810 CVE-2022-1951 · GHSA-m3jq-mhq5-xpc9

Core Plugin for Kitestudio Themes < 2.3.1 - Reflected Cross-Site-Scripting

LOW 29

The core plugin for kitestudio WordPress plugin before 2.3.1 does not sanitise and escape some parameters before outputting them back in a response of an AJAX action, available to both unauthenticated and authenticated u…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00783 Published 2022-07-11 Fixed in 2.3.1 CWE-79

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0