This vulnerability (CVE-2026-27402) is an improper neutralization of input during web page generation (CWE-79) in the Kids Life | Children School WordPress theme by Designthemes. It allows unauthenticated attackers to perform Cross-Site Scripting (XSS) attacks on affected versions up to 5.2. The CVSS 3.1 base score is 7.1, reflecting network attack vector, low attack complexity, no privileges required, user interaction required, and impacts on confidentiality, integrity, and availability (all partial). There is no vendor advisory or patch information available at this time, and no known exploits in the wild have been reported.

Successful exploitation can allow an unauthenticated attacker to execute arbitrary scripts in the context of the victim's browser, potentially leading to partial disclosure of sensitive information, modification of web content, or disruption of availability. The CVSS vector indicates partial impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider applying temporary mitigations such as disabling or restricting use of the affected theme or implementing web application firewall (WAF) rules to detect and block XSS attempts specific to this vulnerability.