3 matches found
Cross site scripting
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Catch Themes Darcie theme = 1.1.5 versions...
5.8CVSS6AI score0.00382EPSS
SaveExploits0References1Affected Software1
CVE-2023-25961
CVE-2023-25961 is an unauthenticated, reflected cross-site scripting (XSS) vulnerability in Catch Themes’ Darcie WordPress theme, affecting versions up to 1.1.5. The issue is triggered through user-supplied input reflected in the page, enabling an attacker to execute script in the victim’s browse...
7.1CVSS6AI score0.00382EPSS
SaveExploits0References1Affected Software1
CVE-2023-25961: Improper Neutralization of Input During Web Page Generation
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Catch Themes Darcie theme = 1.1.5 versions...
7.1CVSS5.8AI score0.00382EPSS
SaveExploits0References3
20