PT-2025-38849 · WordPress · Wpkoi Templates For Elementor

·

CVE-2025-57999

·

Published

2025-09-22

·

Updated

2025-09-22

CVSS v3.1

6.5

Medium

VectorAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions WPKoi Templates for Elementor versions through 3.4.1
Description A flaw exists in WPKoi Templates for Elementor that allows for DOM-Based Cross-site Scripting (XSS). This issue arises from improper neutralization of input during web page generation. The vulnerability could potentially allow an attacker to inject malicious scripts into web pages.
Recommendations Update WPKoi Templates for Elementor to a version later than 3.4.1.

Fix

XSS

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2025-57999

Affected Products

Wpkoi Templates For Elementor