Sitekit

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-5071 MEDIUM PATCH This Month

The Sitekit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'sitekit_iframe' shortcode in versions up to, and including, 1.4 due to insufficient input sanitization and output. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

WordPress XSS Sitekit

NVD VulDB

CVSS 3.1

6.4

EPSS

0.2%

CVE-2023-27628 MEDIUM This Month

Auth. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Sitekit

NVD

CVSS 3.1

5.4

EPSS

0.3%

CVE-2023-5071

EPSS 0% CVSS 6.4

MEDIUM PATCH This Month

WordPress XSS Sitekit

NVD VulDB

CVE-2023-27628

EPSS 0% CVSS 5.4

MEDIUM This Month

Auth. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Sitekit

NVD