5 matches found
CVE-2024-35711
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Theme Freesia Event allows Stored XSS.This issue affects Event: from n/a through 1.2.2...
CVE-2024-35711 WordPress Event theme <= 1.2.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Theme Freesia Event allows Stored XSS.This issue affects Event: from n/a through 1.2.2...
CVE-2024-35711
CVE-2024-35711 describes a Stored XSS in Theme Freesia Event (WordPress) via Improper Neutralization of Input During Web Page Generation. Affects Event: from n/a through 1.2.2. Connected docs confirm the product and vulnerability class but do not provide a patch/version fix details. No exploit ve...
CVE-2024-35711 WordPress Event theme <= 1.2.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Theme Freesia Event allows Stored XSS.This issue affects Event: from n/a through 1.2.2...
WordPress Event Theme <= 1.2.2 is vulnerable to Cross Site Scripting (XSS)
Software Event Type Theme Vulnerable versions = 1.2.2 Fixed in 1.2.3 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-35711 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID d5f7b8ac39ab Credits stealthcopter Required privilege Contributor...