CVE-2023-40555

Deserialization of Untrusted Data vulnerability in UX-themes Flatsome | Multi-Purpose Responsive WooCommerce Theme.This issue affects Flatsome | Multi-Purpose Responsive WooCommerce Theme: from n/a through 3.17.5...

CVE-2023-40555

Deserialization of Untrusted Data vulnerability in UX-themes Flatsome | Multi-Purpose Responsive WooCommerce Theme.This issue affects Flatsome | Multi-Purpose Responsive WooCommerce Theme: from n/a through 3.17.5...

Deserialization of untrusted data

Deserialization of Untrusted Data vulnerability in UX-themes Flatsome | Multi-Purpose Responsive WooCommerce Theme.This issue affects Flatsome | Multi-Purpose Responsive WooCommerce Theme: from n/a through 3.17.5...

CVE-2023-40555

CVE-2023-40555 affects Flatsome theme for WordPress (<= 3.17.5). The vulnerability is a Deserialization of Untrusted Data issue leading to unauthenticated PHP Object Injection via deserialization of untrusted input in the Flatsome codebase. CVSS v3.1 metrics from NVD indicate a CRITICAL impact...

CVE-2023-40555 WordPress Flatsome Theme <= 3.17.5 is vulnerable to PHP Object Injection

Deserialization of Untrusted Data vulnerability in UX-themes Flatsome | Multi-Purpose Responsive WooCommerce Theme.This issue affects Flatsome | Multi-Purpose Responsive WooCommerce Theme: from n/a through 3.17.5...

WordPress Plugin Flatsome Code Issue Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

Flatsome < 3.17.6 - Unauthenticated PHP Object Injection

Description The Flatsome theme for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 3.17.5 via deserialization of untrusted input. This allows unauthenticated attackers to inject a PHP Object. If a POP chain is present via an additional plugin or theme installed o...

WordPress Flatsome Theme <= 3.17.5 is vulnerable to PHP Object Injection

Software Flatsome Type Theme Vulnerable versions = 3.17.5 Fixed in 3.17.6 OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2023-40555 Patch priority High CVSS severity High 8.3 Developer Claim ownership PSID 0472344ea36e Credits Rafie Muhammad Patchstack Required privilege...

CVE-2023-28994

Unauth. Reflected Cross-Site Scripting XSS vulnerability in UX-themes Flatsome plugin = 3.16.8 versions...

CVE-2023-28994

Unauth. Reflected Cross-Site Scripting XSS vulnerability in UX-themes Flatsome plugin = 3.16.8 versions...

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in UX-themes Flatsome plugin = 3.16.8 versions...

CVE-2023-28994

CVE-2023-28994 affects UX-themes Flatsome WordPress plugin up to version 3.16.8. It is an unauthenticated, reflected Cross-Site Scripting (XSS) vulnerability. Patchstack and other sources indicate the fix is in version 3.17.0; users should upgrade to &gt;3.16.8 to mitigate. CVSS data across sourc...

CVE-2023-28994 WordPress Flatsome Theme <= 3.16.8 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in UX-themes Flatsome plugin = 3.16.8 versions...

CVE-2023-28994 WordPress Flatsome Theme <= 3.16.8 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in UX-themes Flatsome plugin = 3.16.8 versions...

WordPress Plugin UX-themes Flatsome 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2023-22071 · Ux Themes · Ux-Themes Flatsome Plugin

Name of the Vulnerable Software and Affected Versions: UX-themes Flatsome plugin versions = 3.16.8 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This vulnerability allows for reflected cross-site scripting attacks without authentication...

WordPress Flatsome Theme <= 3.16.8 is vulnerable to Cross Site Scripting (XSS)

Software Flatsome Type Theme Vulnerable versions = 3.16.8 Fixed in 3.17.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-28994 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID c500cd25ae6b Credits Rafie Muhammad Patchsta...