PT-2026-27845 · Unknown · Uxper Golo

Published 2026-03-25 · Updated 2026-03-30 · CVE-2026-23973

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions uxper Golo versions prior to 1.7.5

Description An issue exists in uxper Golo that allows for Reflected Cross-site Scripting (XSS). This occurs due to improper neutralization of input during web page generation. The issue affects the application’s handling of user-supplied data, potentially allowing an attacker to inject malicious scripts into web pages viewed by other users.

Recommendations Update uxper Golo to version 1.7.5 or later.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2026-23973

Affected Products

Uxper Golo

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-23973 · Security Note
• https://patchstack.com/database/Wordpress/Theme/golo/vulnerability/wordpress-golo-theme-1-7-5-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/2038618108747735070 · Twitter Post