CVE-2023-38391: Themesgrove Onepage Builder

High severity, CVSS 7.2. EPSS: 0.7% chance of exploitation in the next 30 days.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themesgrove Onepage Builder allows SQL Injection.This issue affects Onepage Builder: from n/a through 2.4.1.

Affected products

• Themesgrove Onepage Builder: up to and including 2.4.1

Published 2023-11-04. Last modified 2026-06-17.