CVE-2026-5077: Improper Neutralization of Input During Web Page Generation

The Total theme for WordPress is vulnerable to Stored Cross-Site Scripting via post titles in versions up to, and including, 2.2.1 due to insufficient output escaping when rendering thetitle inside HTML attribute context in the home blog section template. This makes it possible for authenticated...

CVE-2022-4736: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Venganzas del Pasado and classified as problematic. Affected by this issue is some unknown functionality. The manipulation of the argument thetitle leads to cross site scripting. The attack may be launched remotely. The name of the patch is...