CVE-2026-85302

Summary

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPKoi WordPress Themes WPKoi Templates for Elementor allows DOM-Based XSS.

This issue affects WPKoi Templates for Elementor: from n/a through 3.7.2.

Affected Software

VendorProductVersion RangeStatus
WPKoi WordPress ThemesWPKoi Templates for Elementorn/a <= 3.7.2affected

Weaknesses

  • CWE-79: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

References