Kutethemes DukaMarket WordPress Theme Content Injection Vulnerability

A content injection vulnerability has been identified in the Kutethemes DukaMarket WordPress theme, affecting versions through 1.3.0. This vulnerability allows for improper neutralization of script-related HTML tags, leading to basic cross-site scripting (XSS) issues and potential code injection.

Impact

Exploitation of this vulnerability could allow a malicious actor to inject content into pages and posts, with the possibility of introducing phishing pages into the website.

Remediation

Users are advised to update the DukaMarket WordPress theme to the latest version. If unable to update, consult with your hosting provider or web developer for assistance.