Lucene search
Rafie Muhammad (Patchstack)PATCHSTACK:3A29B4F227CC227D468EDD2ADD2844A4HistoryJul 18, 2023 - 12:00 a.m.
WordPress Unakit Theme <= 1.2.4.2 is vulnerable to Cross Site Scripting (XSS)
2023-07-1800:00:00
Rafie Muhammad (Patchstack)
patchstack.com
wordpress
unakit
theme
cross site scripting
xss
vulnerable
version 1.2.4.2
patch
cvss 7.1
medium severity
owasp a3
injection
cve-2023-33999
patchstack
unauthenticated
AI Score
6.2
Confidence
Low
Software
Unakit
Type
Theme
Vulnerable versions
<= 1.2.4.2
Fixed in
N/A
OWASP Top 10
A3: Injection
Classification
Cross Site Scripting (XSS)
CVE
CVE-2023-33999
Patch priority
Medium
CVSS severity
Medium (7.1)
Developer
Claim ownership
PSID
b16b88fbd2b0
Credits
Rafie Muhammad (Patchstack)
Required privilege
Unauthenticated
Published
18 July, 2023
Expand full details Have additional information or questions about this entry? Let us know.
Solution
We advise to mitigate or resolve the vulnerability immediately.
Affected configurations
Node
-unakitRange≤1.2.4.2
Related
wpvulndb
wpvulndb
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
2023-07-25 00:00:00
patchstack
patchstack