Lucene search

K
wpvulndbWpvulndbWPVDB-ID:F10998D2-0589-4C28-9F47-AD798F862AED
HistoryNov 03, 2023 - 12:00 a.m.

Winters theme <= 1.4.3 - Reflected Cross-Site Scripting via Prototype Pollution

2023-11-0300:00:00
wpscan.com
3
winters theme
cross-site scripting
prototype pollution
security
vulnerability

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.7%

Description The theme does not properly sanitize user inputs nor escape output, leading to a reflected Cross-Site Scripting vulnerability via prototype pollution.

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.7%

Related for WPVDB-ID:F10998D2-0589-4C28-9F47-AD798F862AED