736 matches found
CVE-2023-27421
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Everest themes Everest News theme = 1.1.0 versions...
CVE-2023-27412
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Everest themes Mocho Blog theme = 1.0.4 versions...
CVE-2023-27412
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Everest themes Mocho Blog theme = 1.0.4 versions...
Cross site scripting
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Everest themes Everest News theme = 1.1.0 versions...
Cross site scripting
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Everest themes Mocho Blog theme = 1.0.4 versions...
CVE-2023-27412
CVE-2023-27412 is a WordPress Mocho Blog Theme vulnerability: unauthenticated, reflected XSS in Mocho Blog theme versions
CVE-2023-27421 WordPress Everest News Theme <= 1.1.0 is vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Everest themes Everest News theme = 1.1.0 versions...
CVE-2023-27421
The Everest News WordPress Theme vulnerable up to version 1.1.0 is affected by an unauthenticated Reflected Cross-Site Scripting (XSS) flaw. The issue stems from insufficient input sanitization in the Everest News theme prior to 1.1.0, enabling injected scripts to be reflected to users visiting t...
CVE-2023-27421 WordPress Everest News Theme <= 1.1.0 is vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Everest themes Everest News theme = 1.1.0 versions...
WordPress plugin Everest News cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...
PT-2023-21100 · Everest Themes · Mocho Blog Theme
Name of the Vulnerable Software and Affected Versions: Everest themes Mocho Blog theme versions 1.0.4 and earlier Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially...
PT-2023-21110 · Unknown · Everest News
Name of the Vulnerable Software and Affected Versions: Everest News theme versions prior to 1.1.0 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker could potentially inject malicious scripts into a website using the Evere...
WordPress Emails Blacklist for Everest Forms Plugin < 1.0.4 is vulnerable to Cross Site Scripting (XSS)
Software Emails Blacklist for Everest Forms Type Plugin Vulnerable versions 1.0.4 Fixed in 1.0.4 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID ca3c9ef88aae Credits Rafie Muhammad...
CVE-2023-27420
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Everest Themes Arya Multipurpose theme = 1.0.5 versions...
CVE-2023-27420
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Everest Themes Arya Multipurpose theme = 1.0.5 versions...
Cross site scripting
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Everest Themes Arya Multipurpose theme = 1.0.5 versions...
CVE-2023-27420
CVE-2023-27420 corresponds to an unauthenticated reflected Cross-Site Scripting (XSS) vulnerability in the Everest Themes Arya Multipurpose WordPress theme, affected versions are 1.0.5 and earlier. Public sources describe the issue as XSS but do not provide exploitation details in these documents...
CVE-2023-27419
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Everest themes Viable Blog theme = 1.1.4 versions...