CVE-2024-34766

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Automattic ChaosTheory allows Stored XSS.This issue affects ChaosTheory: from n/a through 1.3...

CVE-2024-34766 WordPress ChaosTheory theme <= 1.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Automattic ChaosTheory allows Stored XSS.This issue affects ChaosTheory: from n/a through 1.3...

CVE-2024-34766

CVE-2024-34766 is an XSS flaw in the ChaosTheory WordPress theme (affected: ChaosTheory &lt;= 1.3). The root cause is improper neutralization of input during web page generation, enabling stored XSS when an authenticated user interacts with or views pages generated by the theme. Public documentat...

CVE-2024-34766 WordPress ChaosTheory theme <= 1.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Automattic ChaosTheory allows Stored XSS.This issue affects ChaosTheory: from n/a through 1.3...

WordPress ChaosTheory Theme <= 1.3 is vulnerable to Cross Site Scripting (XSS)

Software ChaosTheory Type Theme Vulnerable versions = 1.3 Fixed in 1.3.2 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-34766 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 5aa9368a599f Credits Rafie Muhammad Patchstack Required...