Vulnerabilities

TI-2024-29596 CVE-2024-44007 · GHSA-42qp-w7cq-j4gj

Cross-site scripting in sonalsinha21 SKT Templates – Elementor & Gutenberg templates

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sonalsinha21 SKT Templates – Elementor & Gutenberg templates skt-templates allows Reflected XSS.This issue affects SKT…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00271 Published 2024-09-17 No fix listed CWE-79

TI-2024-01246 CVE-2024-1337 · GHSA-g6xm-gh7w-3jh2

SKT Page Builder <= 4.1 - Missing Authorization to Authenticated(Subscriber+) Content Injection

LOW 20

The SKT Page Builder plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'saveSktbuilderPageData' function in all versions up to, and including, 4.1.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0034 Published 2024-02-20 No fix listed CWE-862

Vulnerabilities

Filters

Cross-site scripting in sonalsinha21 SKT Templates – Elementor & Gutenberg templates

SKT Page Builder <= 4.1 - Missing Authorization to Authenticated(Subscriber+) Content Injection