PT-2026-23242 · Unknown · Themegoods Architecturer

João Pedro S Alcântara + 1 · Publicado 2026-03-05 · Atualizado 2026-03-05 · CVE-2026-27358

Positive Technologies (AI Summary)

CVSS v3.1

7.1

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions ThemeGoods Architecturer versions through 3.8.8

Description The software contains a Reflected Cross-site Scripting (XSS) issue due to improper neutralization of input during web page generation. This allows for the injection of malicious scripts into web pages. The vulnerability affects the application's handling of user-supplied input, potentially enabling an attacker to execute arbitrary code in the context of a user's browser. The vulnerable component is susceptible to attacks where malicious code is embedded within a crafted URL or input field.

Recommendations Versions prior to 3.8.8 should be updated.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2026-27358

Produtos afetados

Themegoods Architecturer

Referências · 5

• https://patchstack.com/database/wordpress/theme/architecturer/vulnerability/wordpress-architecturer-theme-3-8-8-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-27358 · Nota de Segurança
• https://twitter.com/CVEnew/status/2029654789089361964 · Publicação no Twitter
• https://twitter.com/infoflowcloud/status/2029656113386226044 · Publicação no Twitter
• https://patchstack.com/database/Wordpress/Theme/architecturer/vulnerability/wordpress-architecturer-theme-3-8-8-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve · Nota