CVE-2023-5071

MEDIO 5.4CVE-2023-5071 · Published 20/10/2023 · updated 17/06/2026

In breve

CVE-2023-5071 è una vulnerabilità MEDIO (CVSS 5.4) che riguarda sitekit (sitekit project).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.50%, superiore al 43.1% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
sitekit sitekit_project	`≤ 1.4`	No fix yet

Description

The Sitekit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'sitekit_iframe' shortcode in versions up to, and including, 1.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

References

plugins.trac.wordpress.org/browser/sitekit/trunk/inc/sitekit-shortcode-iframe.php · Patch
plugins.trac.wordpress.org/changeset/2970788/sitekit · Patch
wordfence.com/threat-intel/vulnerabilities/id/011c8a06-298e-4a53-9ef8-552585426d79 · Third Party Advisory

Altre vulnerabilità di sitekit

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free