Himer - Social Questions and Answers < 2.1.1 - Contributor+ Stored XSS

2024-06-1200:00:00

Bob Matyas

himer

social q&a

stored xss

update

june 26 2024

5.8 Medium

AI Score

Confidence

High

0 Low

EPSS

Percentile

0.0%

JSON

Description The theme does not sanitise and escape some of its Post settings, which could allow high privilege users such as Contributor to perform Stored Cross-Site Scripting attacks

The PoC will be displayed on June 26, 2024, to give users the time to update.