real.Kit

real.Kit has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2024; 1 is fixed and 1 remains unpatched as of October 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.

The most common weakness is Improper Neutralization Of Input During Web Page Generation, behind 2 of the records (100%).

1 of the records (50%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2024.

2 independent researchers contributed these findings, one record each.

Strategic Overview

Avg CVSSMedium

6.4/ 10

Patch Coverage50%

Open

Fixed

Get automatic notifications for all real.Kit vulnerabilities before they are exploited.

Most severe open issueCVSS 6.4CVE-2024-12697

real.Kit <= 5.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

2 records


2024-12-20 18:47	real.Kit <= 5.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting real.Kit <= 5.1.1	`CVE-2024-12697`	6.4 Medium	SOPROBRO	No
2023-02-21 00:00	real.Kit <= 5.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode real.Kit <= 5.1.0	`CVE-2023-0364`	6.4 Medium	István Márton	Yes

Showing 1–2 of 2 reports