Sitekit Project Sitekit vulnerabilities

2 vulnerabilities

Known vulnerabilities in Sitekit Project Sitekit, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.5CVE-2023-27628sitekit_projectsitekit+2
EPSS score
0.37%
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Webvitaly Sitekit plugin <= 1.3 versions.6.4CVE-2023-5071sitekit_projectsitekit+2
EPSS score
0.50%
The Sitekit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'sitekit_iframe' shortcode in versions up to, and including, 1.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.