Skip to content
Sign in
6.5 Medium

CVE-2026-57737 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Averta LTD…

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Averta LTD Shortcodes and extra features for Phlox theme auxin-elements allows DOM-Based XSS.This issue affects Shortcodes and extra features for Phlox theme: from n/a through 2.17.22.

Affected products and versions

Product Affected versions Fixed in
Shortcodes and extra features for Phlox theme 2.17 earliest → 2.17.22 No fix stated

Other CVEs of Shortcodes and extra features for Phlox theme

The 3 CVEs of Shortcodes and extra features for Phlox theme →
CVE-2026-74008 Insertion of Sensitive Information Into Sent Data vulnerability in Averta LTD Shortcodes and extra features for Phlox… 5.3 Medium CVE-2025-69016 Missing Authorization vulnerability in Averta LTD Shortcodes and extra features for Phlox theme auxin-elements allows… 4.3 Medium
Track this CVE