4.3
Moyenne
CVE-2026-42694 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Themeum Kirki kirki…
Description
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Themeum Kirki kirki allows Code Injection.This issue affects Kirki: from n/a through 6.4.0.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Kirki 6.4 | premières → 6.4.0 | Pas de correctif indiqué |
Autres CVE de Kirki
Les 12 CVE de Kirki →
CVE-2026-112348
Kirki WordPress Plugin < 6.2.5 reCAPTCHA Bypass via Missing Token
6.9
Moyenne
CVE-2026-112347
Kirki plugin for WordPress before 6.4.1 contains a broken object-level access control vulnerability in its page REST…
7.2
Élevée
CVE-2026-103065
Improper Validation of Specified Quantity in Input vulnerability in Themeum Kirki kirki allows Accessing Functionality…
8.2
Élevée
CVE-2026-66629
Unauthenticated Cross Site Scripting (XSS) in Kirki <= 6.2.3 versions
7.1
Élevée