CVE-2024-35740

CVE-2024-35740 is a stored XSS in the Pixgraphy WordPress theme (Pixgraphy). The vulnerability affects Pixgraphy versions up to 1.3.8 and is described as an input-neutralization issue during web page generation. The connected documents confirm the existence of the vulnerability and the affected v...

PT-2024-26664 · Unknown · Theme Freesia Idyllic

Name of the Vulnerable Software and Affected Versions: Theme Freesia Idyllic versions through 1.1.8 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. The estimated number of...

PT-2024-26661 · Freesia · Theme Freesia Event

Name of the Vulnerable Software and Affected Versions: Theme Freesia Event versions 1.2.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations: For...

CVE-2024-35714: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Theme Freesia Idyllic allows Stored XSS.This issue affects Idyllic: from n/a through 1.1.8...

CVE-2024-35711: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Theme Freesia Event allows Stored XSS.This issue affects Event: from n/a through 1.2.2...

CVE-2024-33955

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Theme Freesia Freesia Empire allows Stored XSS.This issue affects Freesia Empire: from n/a through 1.4.1...

CVE-2024-34376

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Theme Freesia Edge allows Stored XSS.This issue affects Edge: from n/a through 2.0.9...

CVE-2024-34376

CVE-2024-34376 affects the Edge WordPress theme by Freesia Edge. It is a Stored XSS via the Author Display Name in Edge versions up to 2.0.9. Red Hat and Wordfence references confirm the issue and indicate that it is mitigated by updating Edge to the patched version (Edge

PT-2024-25835 · Unknown · Theme Freesia Edge

Name of the Vulnerable Software and Affected Versions: Theme Freesia Edge versions n/a through 2.0.9 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can injec...

CVE-2024-34376: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Theme Freesia Edge allows Stored XSS.This issue affects Edge: from n/a through 2.0.9...