CVE-2023-40214 WordPress Business Pro Theme <= 1.10.4 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Vathemes Business Pro theme = 1.10.4 versions...

CVE-2023-40214

CVE-2023-40214 affects the Vathemes Business Pro theme up to version 1.10.4. It is an unauthenticated reflected XSS vulnerability in the theme. The Red Hat and Patchstack entries corroborate the unauthenticated XSS description for Business Pro

WordPress Business Pro Theme <= 1.10.4 is vulnerable to Cross Site Scripting (XSS)

Software Business Pro Type Theme Vulnerable versions = 1.10.4 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-40214 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 7bda3b04cc6f Credits Mika Required privilege Unauthenticat...