CVE-2018-11568: Cactusthemes Gameplan-Event And Gym Fitness

Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days.

Reflected XSS is possible in the GamePlan theme through 1.5.13.2 for WordPress because of insufficient input sanitization, as demonstrated by the s parameter. In some (but not all) cases, the '<' and '>' characters have &lt; and &gt; representations.

Affected products

• Cactusthemes Gameplan-Event And Gym Fitness: up to and including 1.5.13.2

Published 2018-05-30. Last modified 2026-06-17.