Lucene search
WPScanCVELIST:CVE-2023-7194HistoryJan 22, 2024 - 7:14 p.m.
CVE-2023-7194 Meris <= 1.1.2 - Reflected XSS
2024-01-2219:14:25
WPScan
www.cve.org
2
cve-2023-7194
meris
wordpress
xss
vulnerability
admin
EPSS
0.001
Percentile
17.0%
The Meris WordPress theme through 1.1.2 does not sanitise and escape some parameters before outputting them back in the page, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin
CNA Affected
[
{
"vendor": "Unknown",
"product": "Meris",
"versions": [
{
"status": "affected",
"versionType": "semver",
"version": "0",
"lessThanOrEqual": "1.1.2"
}
],
"defaultStatus": "affected"
}
]Related
wpvulndb
wpvulndb
Meris <= 1.1.2 - Reflected XSS
2024-01-01 00:00:00
wpexploit
wpexploit
Meris <= 1.1.2 - Reflected XSS
2024-01-01 00:00:00
nvd
nvd
CVE-2023-7194
2024-01-22 20:15:47
prion
prion
Cross site scripting
2024-01-22 20:15:00
cve
cve
CVE-2023-7194
2024-01-22 20:15:47
wordfence
wordfence