Lucene search

K
patchstackBrandon Roldan (Patchstack Alliance)PATCHSTACK:EDEA7EA012E64A5FFCCB227C785C50E7
HistoryNov 23, 2022 - 12:00 a.m.

WordPress Activello theme <= 1.4.4 - Auth. Reflected Cross-Site Scripting (XSS) vulnerability

2022-11-2300:00:00
Brandon Roldan (Patchstack Alliance)
patchstack.com
17
wordpress
activello
cross-site scripting

0.001 Low

EPSS

Percentile

23.6%

Auth. Reflected Cross-Site Scripting (XSS) vulnerability in the ajax action β€˜activello_dismiss_recommended_plugins’ discovered by Brandon Roldan (Patchstack Alliance) in the WordPress Activello theme (versions <= 1.4.4).

Solution

           No patched version available.
CPENameOperatorVersion
activellole1.4.4

0.001 Low

EPSS

Percentile

23.6%

Related for PATCHSTACK:EDEA7EA012E64A5FFCCB227C785C50E7