PT-2024-11738 · Villatheme · Villatheme Curcy

Name of the Vulnerable Software and Affected Versions: VillaTheme CURCY versions 2.1.25 and earlier Description: The issue is related to a Missing Authorization vulnerability, allowing exploitation of incorrectly configured access control security levels. This enables unauthenticated settings...

PT-2024-33423 · Villatheme · Villatheme Curcy

Name of the Vulnerable Software and Affected Versions: VillaTheme CURCY versions 2.2.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. Specifically, it is a Reflected XSS vulnerability. This mean...

CVE-2023-50831

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in VillaTheme CURCY – Multi Currency for WooCommerce allows Stored XSS.This issue affects CURCY – Multi Currency for WooCommerce: from n/a through 2.2.0...