Lucene search
K

5 matches found

OSV
OSV
added 2023/10/20 4:15 p.m.4 views

CVE-2023-3933

The Your Journey theme for WordPress is vulnerable to Reflected Cross-Site Scripting via prototype pollution in versions up to, and including, 1.9.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in...

6.1CVSS7.4AI score0.00386EPSS
Exploits0References2
CVE
CVE
added 2023/10/20 3:6 p.m.93 views

CVE-2023-3933

The CVE-2023-3933 entry applies to the WordPress Your Journey theme (versions up to and including 1.9.8). Reported vulnerability: Reflected Cross-Site Scripting via prototype pollution caused by insufficient input sanitization and output escaping, enabling unauthenticated attackers to inject arbi...

6.1CVSS6.2AI score0.00386EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2023/10/20 12:0 a.m.4 views

PT-2023-26884 · WordPress · Your Journey

Name of the Vulnerable Software and Affected Versions: The Your Journey theme for WordPress versions up to, and including, 1.9.8 Description: The issue is related to Reflected Cross-Site Scripting via prototype pollution due to insufficient input sanitization and output escaping. This allows...

6.1CVSS6.4AI score0.00386EPSS
Exploits0References5
CNNVD
CNNVD
added 2023/10/20 12:0 a.m.3 views

WordPress Plugin Your Journey Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

6.1CVSS6.1AI score0.00386EPSS
Exploits0References3
CNNVD
CNNVD
added 2023/10/20 12:0 a.m.5 views

WordPress Plugin Your Journey Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

6.1CVSS6.1AI score0.00386EPSS
Exploits0References3
Rows per page
Query Builder