Lucene search
+L

3 matches found

OSV
OSV
added 2024/01/11 9:15 a.m.10 views

CVE-2023-6990

The Weaver Xtreme theme for WordPress is vulnerable to Stored Cross-Site Scripting via custom post meta in all versions up to, and including, 6.3.0 due to insufficient input sanitization and output escaping on user supplied meta page-head-code. This makes it possible for authenticated attackers...

5.4CVSS7.4AI score0.00315EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2024/01/11 9:15 a.m.4 views

CVE-2023-6990

The Weaver Xtreme theme for WordPress is vulnerable to Stored Cross-Site Scripting via custom post meta in all versions up to, and including, 6.3.0 due to insufficient input sanitization and output escaping on user supplied meta page-head-code. This makes it possible for authenticated attackers...

5.4CVSS5.6AI score0.00315EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/01/11 8:32 a.m.7 views

CVE-2023-6990 Weaver Xtreme <= 6.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Weaver Xtreme theme for WordPress is vulnerable to Stored Cross-Site Scripting via custom post meta in all versions up to, and including, 6.3.0 due to insufficient input sanitization and output escaping on user supplied meta page-head-code. This makes it possible for authenticated attackers...

5.4CVSS6.8AI score0.00315EPSS
SaveExploits0References2
Rows per page
Query Builder