CVE-2026-112863: WordPress KALLYAS theme <= 4.25.0 - Cross Site Scripting (XSS) vulnerability

Q: What does an attacker need to exploit this issue?

The attacker does not need authentication, but exploitation requires user interaction. The attack is network-accessible and involves delivering crafted input that is reflected in a web page.

Q: What impact can successful exploitation have?

Successful exploitation can affect confidentiality, integrity, and availability, each with low impact. Because the scope is changed, the impact may extend beyond the vulnerable theme's own security authority.

Q: Which KALLYAS versions are affected?

KALLYAS versions through 4.25.0 are affected. The available data does not identify a fixed version.

Published Oct 23, 2026

Updated

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hogash KALLYAS kallyas allows Reflected XSS.This issue affects KALLYAS: from n/a through 4.25.0.

Affected Software

1 affected component

hogash Kallyas<=4.25.0

Event History

Oct 23, 2026

CVE Published

via MITRE·01:00 PM

Data Sourced

via MITRE·01:00 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What does an attacker need to exploit this issue?

The attacker does not need authentication, but exploitation requires user interaction. The attack is network-accessible and involves delivering crafted input that is reflected in a web page.

What impact can successful exploitation have?

Successful exploitation can affect confidentiality, integrity, and availability, each with low impact. Because the scope is changed, the impact may extend beyond the vulnerable theme's own security authority.

Which KALLYAS versions are affected?

KALLYAS versions through 4.25.0 are affected. The available data does not identify a fixed version.

CVE-2026-112863: WordPress KALLYAS theme <= 4.25.0 - Cross Site Scripting (XSS) vulnerability

Affected Software

Event History

Frequently Asked Questions

What does an attacker need to exploit this issue?

What impact can successful exploitation have?

Which KALLYAS versions are affected?

Company

Resources

Contact

Frequently Asked Questions

What does an attacker need to exploit this issue?

What impact can successful exploitation have?

Which KALLYAS versions are affected?