Skip to content
OpenAdvisories

Vendor

realmaster-1

1 known vulnerabilities.

Products

real.Kit 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.4
    CVE-2024-12697

    real.Kit <= 5.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The real.Kit plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 5.1.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level a…

    realmaster-1 real.Kit Web / CMS