Multiple Themes - Reflected XSS

2023-08-1400:00:00

Random Robbie

reflected xss

multiple themes

html injection

alert exploit

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

51.2%

JSON

Description The themes suffer from the same issue about the search box reflecting the results causing XSS which allows an unauthenticated attacker to exploit against users if they click a malicious link.

https://example.com/?s=katana<IMG """><IMG SRC=/ onerror="alert(1)"></img>/asd/