Description
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in UX-themes Flatsome plugin <= 3.16.8 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| UX-themes | Flatsome | ≤ 3.16.8 | — |
High · 7.1
CVE-2023-28994
EUVD-2023-32612GHSA-37v5-c725-c494
WordPress Flatsome Theme <= 3.16.8 is vulnerable to Cross Site Scripting (XSS)
Published Aug 23, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack