THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-85302 (MEDIUM 6.5) — Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPKoi WordPress Themes WPKoi Templates for Elementor allows DOM-Based XSS. This issue affects WPKoi Templates for Elementor: from n/a through 3.7.2.

[NVD] CVE-2026-85302 (MEDIUM 6.5) — Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPKoi WordPress Themes WPKoi Templates for Elementor allows DOM-Based XSS. This issue affects WPKoi Templates for Elementor: from n/a through 3.7.2.

mednvdPublished 2026-09-03

CVE-2026-85302 CVSS: 6.5 MEDIUM Published: 2026-09-03T17:17:30.320

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPKoi WordPress Themes WPKoi Templates for Elementor allows DOM-Based XSS.

This issue affects WPKoi Templates for Elementor: from n/a through 3.7.2.

Indicators of compromise

CVE-2026-85302cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-85302