CVE-2023-29236

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Cththemes Outdoor theme = 3.9.6 versions...

EUVD-2023-32813

Malicious code in bioql PyPI...

CVE-2023-29236

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Cththemes Outdoor theme = 3.9.6 versions...

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Cththemes Outdoor theme = 3.9.6 versions...

CVE-2023-29236

CVE-2023-29236 is an unauthenticated reflected XSS in the Cththemes Outdoor WordPress theme, affected versions up to 3.9.6. Publicly documented details confirm the vulnerability and that a fix exists: update to version 3.9.7 or newer. Multiple sources (Wordfence, NVD, Red Hat advisory, Patchstack...

CVE-2023-29236 WordPress Outdoor Theme <= 3.9.6 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Cththemes Outdoor theme = 3.9.6 versions...

CVE-2023-29236 WordPress Outdoor Theme <= 3.9.6 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Cththemes Outdoor theme = 3.9.6 versions...

WordPress Outdoor Theme <= 3.9.6 is vulnerable to Cross Site Scripting (XSS)

Software Outdoor Type Theme Vulnerable versions = 3.9.6 Fixed in 3.9.7 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-29236 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID badb7b865758 Credits RE-ALTER Required privilege...

Outdoor < 3.9.7 - Reflected XSS

The theme does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...