CVE-2024-9777

creationtimestamp| type| source ---|---|--- 2024-11-19 12:51:18+00:00| seen| https://infosec.exchange/users/cve/statuses/113509707155589232 2024-11-19 15:08:17+00:00| seen| https://t.me/cvedetector/11449...

CVE-2024-9777

CVE-2024-9777 (Ashe theme for WordPress) is a Reflected Cross‑Site Scripting issue caused by insufficient escaping of add_query_arg usage in all versions up to 2.243. The vulnerability allows unauthenticated attackers to inject scripts into pages that execute when a user is enticed to perform an ...

CVE-2024-9777 Ashe <= 2.243 - Reflected Cross-Site Scripting via add_query_arg Parameter

The Ashe theme for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.243. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execut...

CVE-2024-9777 Ashe <= 2.243 - Reflected Cross-Site Scripting via add_query_arg Parameter

The Ashe theme for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 2.243. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execut...

WordPress Ashe Theme <= 2.243 is vulnerable to Cross Site Scripting (XSS)

Software Ashe Type Theme Vulnerable versions = 2.243 Fixed in 2.244 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-9777 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 1ba0e6cd8ae8 Credits vgo0 Required privilege...