← All advisories

High severity7.1NVD Advisory· Published Jul 25, 2023· Updated Jun 17, 2026

CVE-2023-36502

CVE-2023-36502

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cththemes Balkon plugin <= 1.3.2 versions.

Affected products

2

WordPress/Balkonllm-fuzzy
Range: <=1.3.2
cththemes/Balkonv5
Range: n/a

Patches

Vulnerability mechanics

References

1

patchstack.com/database/vulnerability/balkon/wordpress-balkon-theme-1-3-2-reflected-cross-site-scripting-xss-vulnerabilitynvdThird Party Advisory

News mentions

0

No linked articles in our index yet.