PT-2024-26661 · Freesia · Theme Freesia Event

Name of the Vulnerable Software and Affected Versions: Theme Freesia Event versions 1.2.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations: For...

PT-2024-26664 · Unknown · Theme Freesia Idyllic

Name of the Vulnerable Software and Affected Versions: Theme Freesia Idyllic versions through 1.1.8 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. The estimated number of...

CVE-2024-33955

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Theme Freesia Freesia Empire allows Stored XSS.This issue affects Freesia Empire: from n/a through 1.4.1...

CVE-2024-34376

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Theme Freesia Edge allows Stored XSS.This issue affects Edge: from n/a through 2.0.9...

CVE-2024-34376

CVE-2024-34376 affects the Edge WordPress theme by Freesia Edge. It is a Stored XSS via the Author Display Name in Edge versions up to 2.0.9. Red Hat and Wordfence references confirm the issue and indicate that it is mitigated by updating Edge to the patched version (Edge

PT-2024-25835 · Unknown · Theme Freesia Edge

Name of the Vulnerable Software and Affected Versions: Theme Freesia Edge versions n/a through 2.0.9 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can injec...