Sitekit Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Sitekit Project records in CISA KEV

No Sitekit Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Sitekit 2 records LOW

Records

2 records

TI-2023-12338 CVE-2023-27628 · GHSA-39c2-rwqr-m237

WordPress Sitekit Plugin <= 1.3 is vulnerable to Cross Site Scripting (XSS)

LOW 29

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Webvitaly Sitekit plugin <= 1.3 versions.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00366 Published 2023-09-27 No fix listed CWE-79

TI-2023-04666 CVE-2023-5071 · GHSA-hwhm-x7h4-2284

Sitekit <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sitekit_iframe' shortcode

LOW 29

The Sitekit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'sitekit_iframe' shortcode in versions up to, and including, 1.4 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00501 Published 2023-10-20 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0