cleantalk
Vulnerabilities and Security Researches

Sitekit, CVE-2025-50047

CVE, Research URL

CVE-2025-50047

Home page URL

Security reports for Sitekit

Application

Sitekit

Published on
Jun 20, 2025
Research Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in webvitaly Sitekit allows Stored XSS. This issue affects Sitekit: from n/a through 1.9.
Affected versions
max 2.0.
Status
vulnerable
Previous vulnerability researches
ELEX WordPress HelpDesk & Customer Ticketing System (CVE-2024-12171) , Feb 02, 2025
ELEX WordPress HelpDesk & Customer Ticketing System (CVE-2025-47658) , May 14, 2025
New vulnerability
FileBird – WordPress Media Library Folders & File Manager (CVE-2025-11510) , Oct 29, 2025
WordPress Webinar Plugin – WebinarPress (CVE-2025-62972) , Oct 29, 2025
Genealogical Tree – WordPress Family Tree (CVE-2025-58023) , Oct 12, 2025
WPB Quick View Popup for WooCommerce – Display Product Informations in Popup on Button Click (CVE-2025-57967) , Oct 12, 2025
Mixtape (CVE-2025-9860) , Oct 12, 2025