cleantalk
Vulnerabilities and Security Researches

Sitekit, CVE-2025-50047

CVE, Research URL

CVE-2025-50047

Home page URL

Security reports for Sitekit

Application

Sitekit

Published on
Jun 20, 2025
Research Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in webvitaly Sitekit allows Stored XSS. This issue affects Sitekit: from n/a through 1.9.
Affected versions
Min -, max 2.0.
Status
vulnerable
Previous vulnerability researches
Easy FancyBox – WordPress Lightbox Plugin (CVE-2024-5020) , Dec 06, 2024
Easy FancyBox – WordPress Lightbox Plugin (CVE-2025-52707) , Jun 30, 2025
Easy FancyBox – WordPress Lightbox Plugin , Jul 24, 2024
Easy FancyBox – WordPress Lightbox Plugin (CVE-2024-50460) , Oct 27, 2024
Easy FancyBox – WordPress Lightbox Plugin (CVE-2019-16524) , Jun 06, 2024
New vulnerability
Owl carousel responsive (CVE-2025-5590) , Jul 01, 2025
App Builder – Create Native Android & iOS Apps On The Flight (CVE-2025-49989) , Jul 01, 2025
Sitekit (CVE-2025-50047) , Jul 01, 2025
Responsive Food and Drink Menu (CVE-2025-6378) , Jul 01, 2025
Flexo Counter (CVE-2025-50052) , Jul 01, 2025