CVE-2023-29100

CVE-2023-29100 affects Dream-Theme The7 WordPress theme (The7) with unauthenticated reflected XSS in versions

WordPress Theme The7 跨站脚本漏洞

WordPress is a blogging platform developed in PHP by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress theme is a theme for WordPress. A cross-site scripting vulnerability exists in WordPress Theme The7 11.6.0 and earlier...

WordPress The7 Theme <= 11.6.0 is vulnerable to Cross Site Scripting (XSS)

Software The7 Type Theme Vulnerable versions = 11.6.0 Fixed in 11.6.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-29100 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 24f83da1f799 Credits Rafie Muhammad Patchstack...

the7.co.uk Cross Site Scripting vulnerability OBB-2322308

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WordPress The7 theme cross-site scripting vulnerability

WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL.WordPress The7 theme is a plugin based on wordpress themes. WordPress The7 theme suffers from a cross-site scripting vulnerability that allows remote attackers to...

WordPress The7 Premium Theme <= 2.1.0 - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Update the theme...

The7 Premium Theme < 2.1.1 - Cross-Site Scripting (XSS)

The the7 WordPress theme was affected by a Cross-Site Scripting XSS security vulnerability...