Lucene search

CVE-2024-39629

🗓️ 01 Aug 2024 23:51:15Reported by PatchstackType

Improper Input Neutralization in ThemeGrill Himalayas allows Stored XS

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 5
Vulnrichment	CVE-2024-39629 WordPress Himalayas theme <= 1.3.2 - Cross Site Scripting (XSS) vulnerability	1 Aug 202422:28	–	vulnrichment
Patchstack	WordPress Himalayas Theme <= 1.3.2 is vulnerable to Cross Site Scripting (XSS)	22 Jul 202400:00	–	patchstack
NVD	CVE-2024-39629	1 Aug 202423:15	–	nvd
Cvelist	CVE-2024-39629 WordPress Himalayas theme <= 1.3.2 - Cross Site Scripting (XSS) vulnerability	1 Aug 202422:28	–	cvelist
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (July 22, 2024 to July 28, 2024)	1 Aug 202414:18	–	wordfence

Nvd

Vulners

Node

themegrill himalayasRange≤1.3.2wordpress

[
  {
    "collectionURL": "https://wordpress.org/themes",
    "defaultStatus": "unaffected",
    "packageName": "himalayas",
    "product": "Himalayas",
    "vendor": "ThemeGrill",
    "versions": [
      {
        "lessThanOrEqual": "1.3.2",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
patchstack	www.patchstack.com/database/vulnerability/himalayas/wordpress-himalayas-theme-1-3-2-cross-site-scripting-xss-vulnerability

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

01 Aug 2024 23:15Current

5.8Medium risk

Vulners AI Score5.8

CVSS34.8 - 5.9

EPSS0.00047

SSVC

CWE-79