Lucene search
K

6 matches found

NVD
NVD
added 2024/11/09 3:15 a.m.6 views

CVE-2024-9775

The Anih - Creative Agency WordPress Theme theme for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2024 due to an incomplete blacklist, insufficient input sanitization, and output escaping. This makes it possible for authenticated...

5.5CVSS0.00276EPSS
Exploits0References2
CVE
CVE
added 2024/11/09 2:32 a.m.41 views

CVE-2024-9775

CVE-2024-9775 affects the Anih - Creative Agency WordPress Theme. It describes a Stored Cross-Site Scripting (XSS) via admin settings in all versions up to 2024, caused by incomplete blacklist and insufficient input sanitization/output escaping. The vulnerability can be exploited by an authentica...

5.5CVSS4.9AI score0.00276EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2024/11/09 2:32 a.m.14 views

CVE-2024-9775 Anih - Creative Agency WordPress Theme <= 2024 - Authenticated (Administrator+) Stored Cross-Site Scripting

The Anih - Creative Agency WordPress Theme theme for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2024 due to an incomplete blacklist, insufficient input sanitization, and output escaping. This makes it possible for authenticated...

5.5CVSS0.00276EPSS
Exploits0References2
Patchstack
Patchstack
added 2024/11/08 10:5 p.m.2 views

WordPress Anih theme <= 2024 - Authenticated (Administrator+) Stored Cross-Site Scripting vulnerability

Authenticated Administrator+ Stored Cross-Site Scripting vulnerability discovered by Chinmoy Pratim Borah in WordPress Theme Anih versions = 2024...

5.5CVSS5.8AI score0.00276EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack
added 2024/11/08 12:0 a.m.11 views

WordPress Anih Theme <= 2024 is vulnerable to Cross Site Scripting (XSS)

Software Anih Type Theme Vulnerable versions = 2024 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-9775 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 16306e285086 Credits Chinmoy Pratim Borah Required privilege...

5.5CVSS6AI score0.00276EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2024/11/08 12:0 a.m.2 views

PT-2024-39833 · WordPress · The Anih - Creative Agency Wordpress Theme

Name of the Vulnerable Software and Affected Versions: The Anih - Creative Agency WordPress Theme versions up to, and including, 2024 Description: The issue is related to Stored Cross-Site Scripting via admin settings due to an incomplete blacklist, insufficient input sanitization, and output...

5.5CVSS6.1AI score0.00276EPSS
Exploits0References8
Rows per page
Query Builder