Skip to content
Threat Feed
Subscribe

Product

Kirki – Freeform Page Builder, Website Builder & Customizer (<= 6.3.1)

1 brief RSS
high advisory

Stored XSS in Kirki WordPress Plugin via Registration Metadata

The Kirki plugin for WordPress is vulnerable to Stored XSS due to insufficient input validation in registration metadata, allowing unauthenticated attackers to inject malicious scripts.

Kirki – Freeform Page Builder, Website Builder & Customizer
2t 1c