Sign in

8.2 High

CVE-2024-33556 Unrestricted Upload of File with Dangerous Type vulnerability in 8theme XStore Core.This issue affects XStore Core: from…

Description

Unrestricted Upload of File with Dangerous Type vulnerability in 8theme XStore Core.This issue affects XStore Core: from n/a through 5.3.8.

Affected products and versions

Product	Affected versions	Fixed in
XStore Core 5.3	earliest → 5.3.8	No fix stated
xstore_core 5.3	earliest → 5.3.8	No fix stated

The 12 CVEs of XStore Core →

CVE-2026-25306 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 8theme XStore Core… 7.1 High CVE-2026-25307 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 8theme XStore Core… 6.5 Medium CVE-2025-64190 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 8theme XStore Core… 6.5 Medium CVE-2025-64189 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 8theme XStore Core… 7.1 High

Do you use XStore Core?

Track this CVE Watch XStore Core Check my SBOMs

www.cveye.io/en/cve/CVE-2024-33556

Timeline

Published May 17, 2024
Last modified April 28, 2026

References

patchstack.com patchstack.com

Track this CVE