CVE-2024-5638

CVE-2024-5638 is a Reflected XSS affecting the Formula WordPress theme. The vulnerability arises from insufficient input sanitization and output escaping in the ti_customizer_notify_dismiss_recommended_plugins AJAX action, enabling unauthenticated attackers to inject script via the id parameter i...

CVE-2024-5613

The Formula WordPress theme has CVE-2024-5613: a Reflected XSS via the id parameter in the quality_customizer_notify_dismiss_action AJAX action, affecting all versions up to 0.5.1. Insufficient input sanitization and output escaping allow unauthenticated attackers to inject arbitrary scripts into...