Skip to content
Threat Feed
Subscribe

Vendor

Kirki

1 brief RSS
high advisory

Stored Cross-Site Scripting in Kirki WordPress Plugin

The Kirki plugin for WordPress version 6.2.0 and below is susceptible to unauthenticated Stored Cross-Site Scripting (XSS) via the 'comment' parameter, potentially leading to unauthorized script execution in administrative or user sessions.

Kirki – Freeform Page Builder, Website Builder & Customizer wordpress xss vulnerability
2t 1c