CVE-2025-22312: WordPress Thim Elementor Kit plugin <= 1.2.9 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThimPress Thim Elementor Kit thim-elementor-kit allows DOM-Based XSS.This issue affects Thim Elementor Kit: from n/a through <= 1.2.9.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-22312?
CVE-2025-22312 is classified as a Cross-site Scripting (XSS) vulnerability, which can allow an attacker to execute scripts in the context of a user's browser.
How do I fix CVE-2025-22312?
To fix CVE-2025-22312, update the Thim Elementor Kit to version 1.2.9 or later to eliminate the vulnerability.
What versions are affected by CVE-2025-22312?
CVE-2025-22312 affects Thim Elementor Kit versions up to and including 1.2.8.
What is the nature of the vulnerability CVE-2025-22312?
CVE-2025-22312 involves improper neutralization of input during web page generation, leading to DOM-Based XSS.
Who is impacted by CVE-2025-22312?
Users of the Thim Elementor Kit plugin for WordPress, specifically those using versions up to 1.2.8, are impacted by CVE-2025-22312.