CVE-2024-3867

CVE-2024-3867 Dieses Repository zeigt dir einige Informationen zu dieser Schwachstelle, die von mir gefunden wurde. Hier ist die offizielle Beschreibung: Das Theme archive-tainacan-collection für WordPress ist anfällig für Reflected Cross-Site Scripting aufgrund der Verwendung von addqueryarg ohn...

CVE-2024-3867

The archive-tainacan-collection theme for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in version 2.7.2. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if...

CVE-2024-3867 Tainacan Interface <= 2.7.2 - Reflected Cross-Site Scripting

The archive-tainacan-collection theme for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in version 2.7.2. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if...

CVE-2024-3867

CVE-2024-3867 affects the WordPress theme archive-tainacan-collection, up to version 2.7.2. The root cause is Reflected Cross-Site Scripting due to using add_query_arg without proper escaping, enabling unauthenticated attackers to inject scripts in pages that execute when a user clicks a link. Pu...

PT-2024-28112

Name of the Vulnerable Software and Affected Versions archive-tainacan-collection theme for WordPress versions 2.7.1 through 2.7.2 Description The issue is related to Reflected Cross-Site Scripting, which occurs due to the use of add query arg without proper escaping on the URL. This allows...

CVE-2024-3867: Improper Neutralization of Input During Web Page Generation

The archive-tainacan-collection theme for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in version 2.7.2. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if...