Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in UX-themes Flatsome flatsome allows Stored XSS.This issue affects Flatsome: from n/a through <= 3.20.1.
Metrics
Affected Vendors & Products
No data.
No data.
No data.
No data.
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Thu, 26 Feb 2026 08:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in UX-themes Flatsome flatsome allows Stored XSS.This issue affects Flatsome: from n/a through <= 3.20.1. | |
| Title | WordPress Flatsome theme <= 3.20.1 - Cross Site Scripting (XSS) vulnerability | |
| Weaknesses | CWE-79 | |
| References |
|
Projects
Sign in to view the affected projects.
MITRE
Status: PUBLISHED
Assigner: Patchstack
Published:
Updated: 2026-02-26T08:33:36.172Z
Reserved: 2026-02-25T12:13:51.943Z
Link: CVE-2026-28083
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-02-26T09:16:14.857
Modified: 2026-02-26T09:16:14.857
Link: CVE-2026-28083
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses