PT-2024-29031 · Andondesign · Udesign

Name of the Vulnerable Software and Affected Versions: AndonDesign UDesign versions n/a through 4.7.3 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to...

CVE-2024-4077: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AndonDesign UDesign allows Reflected XSS.This issue affects UDesign: from n/a through 4.7.3...

WordPress theme UDesign 跨站脚本漏洞

WordPress is a blogging platform developed in PHP by the WordPress Foundation. The platform supports personal blog sites on PHP and MySQL servers.WordPress theme is a theme for WordPress. A cross-site scripting vulnerability exists in WordPress theme UDesign version 4.7.3 and prior versions, whic...

WordPress UDesign theme <= 4.13.5 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Rafie Muhammad Patchstack in WordPress Theme UDesign versions = 4.13.5...

WordPress UDesign Theme <= 4.7.3 is vulnerable to Cross Site Scripting (XSS)

Software UDesign Type Theme Vulnerable versions = 4.7.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-4077 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID b5fe2949f69d Credits Rafie Muhammad Patchstack Required privilege...

WordPress uDesign Theme Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports the PHP and MySQL servers to set up a personal blog site. uDesign aka U-Design is one of the theme plug-ins. A cross-site scripting vulnerability exists in WordPress...

CVE-2015-7357

Cross-site scripting XSS vulnerability in the uDesign aka U-Design theme 2.3.0 before 2.7.10 for WordPress allows remote attackers to inject arbitrary web script or HTML via a fragment identifier, as demonstrated by...

Cross site scripting

Cross-site scripting XSS vulnerability in the uDesign aka U-Design theme 2.3.0 before 2.7.10 for WordPress allows remote attackers to inject arbitrary web script or HTML via a fragment identifier, as demonstrated by...

CVE-2015-7357: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the uDesign aka U-Design theme 2.3.0 before 2.7.10 for WordPress allows remote attackers to inject arbitrary web script or HTML via a fragment identifier, as demonstrated by...

CVE-2015-7357

Cross-site scripting XSS vulnerability in the uDesign aka U-Design theme 2.3.0 before 2.7.10 for WordPress allows remote attackers to inject arbitrary web script or HTML via a fragment identifier, as demonstrated by...

CVE-2015-7357

CVE-2015-7357 is a DOM-based XSS in the WordPress uDesign (U-Design) theme. Affected versions are 2.3.0 prior to 2.7.10 (commonly noted as 2.3.0–2.7.9); a remote attacker could inject arbitrary script/HTML by supplying a fragment identifier (e.g., #). The vulnerability arises in how fragment iden...

WordPress uDesign Theme <= 2.7.9 - Cross Site Scripting

This WordPress uDesign theme is prone to a DOM cross site scripting vulnerability. Solution Update the theme...

uDesign Theme 1.8.0-2.7.9 - DOM Cross-Site Scripting (XSS)

The u-design WordPress theme was affected by a DOM Cross-Site Scripting XSS security vulnerability...