5 matches found
WordPress OneTone theme <= 3.0.6 – Unauthenticated Stored XSS
includes/theme-functions.php in the OneTone theme through 3.0.6 for WordPress has multiple stored XSS issues. id: CVE-2019-17231 info: name: WordPress OneTone theme = 3.0.6 – Unauthenticated Stored XSS author: daffainfo severity: medium description: | includes/theme-functions.php in the OneTone...
CVE-2019-17231
includes/theme-functions.php in the OneTone theme through 3.0.6 for WordPress has multiple stored XSS issues...
CVE-2019-17231
includes/theme-functions.php in the OneTone theme through 3.0.6 for WordPress has multiple stored XSS issues...
CVE-2019-17231
The OneTone theme for WordPress (versions 3.0.6 and earlier ) contains multiple stored Cross-Site Scripting (XSS) vulnerabilities within the includes/theme-functions.php file. The root cause is a lack of proper validation of client-side data by the web application. An unauthenticated attacker can...
