CVE-2026-57373 Wisetr INC. CVE debrief

Who should care

Defenders responsible for Funnel Kit Funnel Builder PRO installations should assess exposure and prioritize verification of current security controls.

Why it matters

Defenders should prioritize verifying exposure of Funnel Kit Funnel Builder PRO installations and assessing the effectiveness of current security controls due to a potential Cross Site Scripting (XSS) vulnerability.

• Potential for unauthorized script execution
• Possible impact on user interactions
• Requires verification of Funnel Kit Funnel Builder PRO installations
• May necessitate upgrades or additional security controls

Technical summary

The CVE record indicates a Cross Site Scripting (XSS) vulnerability exists in Funnel Kit Funnel Builder PRO versions up to 3.15.0.4. The CVSS score is 6.5, with a severity rating of MEDIUM.

Defensive priority

Defenders should prioritize verifying exposure of Funnel Kit Funnel Builder PRO installations and assessing the effectiveness of current security controls.

Recommended defensive actions

• Verify Funnel Kit Funnel Builder PRO installations for version 3.15.0.4 or earlier
• Assess the effectiveness of current security controls in preventing XSS attacks
• Consider upgrading to a patched version of Funnel Kit Funnel Builder PRO if available

Evidence notes

The CVE record and NVD entry provide limited information about the vulnerability. Further investigation is required to determine the full scope of affected systems and potential impact.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.