2 matches found
CVE-2023-2813
CVE-2023-2813 describes a reflected XSS in multiple WordPress themes (e.g., Aapna, Anand, Anfaust, Arendelle, etc.) up to varying versions (as listed in the description). The issue arises from the search box reflecting results, allowing an unauthenticated attacker to lure users into clicking a ma...
CVE-2023-3708
CVE-2023-3708 : Several WordPress themes by DeoThemes are vulnerable to Reflected Cross-Site Scripting via breadcrumbs in multiple versions due to insufficient input sanitization and output escaping. The issue allows unauthenticated attackers to inject arbitrary scripts into pages that may run wh...