Skip to content
Sign in
6.5 Medium

CVE-2024-52423 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themifyme…

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themifyme Themify Builder themify-builder allows Stored XSS.This issue affects Themify Builder: from n/a through <= 7.6.5.

Affected products and versions

Product Affected versions Fixed in
Themify Builder 7.6 earliest → 7.6.3 No fix stated
Themify Builder 7.6 earliest → 7.6.5 No fix stated

Other CVEs of Themify Builder

The 3 CVEs of Themify Builder →
CVE-2024-56216 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in… 6.5 Medium CVE-2024-24872 Cross-Site Request Forgery (CSRF) vulnerability in Themify Themify Builder.This issue affects Themify Builder: from… 4.3 Medium
Track this CVE