Lucene search
+L

3 matches found

Cvelist
Cvelist
added 2023/12/14 2:32 p.m.38 views

CVE-2023-49827 WordPress Soledad Theme <= 8.4.1 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PenciDesign Soledad – Multipurpose, Newspaper, Blog & WooCommerce WordPress Theme allows Reflected XSS.This issue affects Soledad – Multipurpose, Newspaper, Blog & WooCommerce WordPress Theme: from...

7.1CVSS7.2AI score0.00393EPSS
SaveExploits0References1
CVE
CVE
added 2023/12/14 2:32 p.m.86 views

CVE-2023-49827

CVE-2023-49827 affects the Soledad WordPress theme (multipurpose/Soledad) up to version 8.4.1, enabling Reflected XSS due to improper input handling in web page generation. The Red Hat and Patchstack entries corroborate the vulnerability and list 8.4.2 as the fixed version. Recommended remediatio...

7.1CVSS7.1AI score0.00393EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2023/12/05 12:0 a.m.16 views

WordPress Soledad Theme <= 8.4.1 is vulnerable to Cross Site Scripting (XSS)

Software Soledad Type Theme Vulnerable versions = 8.4.1 Fixed in 8.4.2 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-49827 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 4415c6f5a085 Credits Rafie Muhammad Patchstack Required...

7.1CVSS6.5AI score0.00393EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder