Lucene search

K

The7 Security Vulnerabilities - 2023

cve

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Dream-Theme The7 plugin <= 11.6.0 versions.

7.1CVSS

5.9AI Score

0.0005EPSS

2023-06-23 01:15 PM

49

cve

Cross-Site Request Forgery (CSRF) vulnerability in Dream-Theme The7 allows Stored XSS.This issue affects The7: from n/a through 11.7.3.

7.1CVSS

6.3AI Score

0.0005EPSS

2023-11-13 06:15 PM

29