CVE-2023-6781

The Orbit Fox by ThemeIsle plugin contains a cross-site scripting vulnerability that exists in versions prior to 2.10.27, which Nex Team identified and reported. An attacker could exploit this flaw to inject malicious scripts into a website, enabling the execution of harmful code such as redirects, advertisements, or other HTML content when visitors access the site. The vulnerability has been addressed in version 2.10.27 and later, so users should upgrade their plugin immediately to mitigate the risk.

Based on public CVE data (MITRE/NVD).