PT-2026-22132 · Ux Themes · Flatsome

João Pedro S Alcântara + 1 · Publicado 2026-02-26 · Atualizado 2026-02-26 · CVE-2026-28083

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Flatsome versions through 3.20.1

Description A flaw exists in UX-themes Flatsome that allows for Stored Cross-site Scripting (XSS). This issue involves improper neutralization of input during web page generation. The vulnerability could potentially allow an attacker to inject malicious scripts into web pages viewed by other users.

Recommendations Update Flatsome to a version later than 3.20.1.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2026-28083

Produtos afetados

Flatsome

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-28083 · Nota de Segurança
• https://patchstack.com/database/Wordpress/Theme/flatsome/vulnerability/wordpress-flatsome-theme-3-20-1-cross-site-scripting-xss-vulnerability?_s_id=cve · Nota
• https://t.me/CVEtracker/45839 · Publicação no Telegram
• https://twitter.com/CVEnew/status/2027004186471157777 · Publicação no Twitter