6.1
Medium
CVE-2025-1798 The does not sanitise and escape some parameters when outputting them back in a page, allowing unauthenticated users…
Description
The does not sanitise and escape some parameters when outputting them back in a page, allowing unauthenticated users the ability to perform stored Cross-Site Scripting attacks.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| design-comuni-wordpress-theme 1.1 | earliest → < 1.1.2 | 1.1.2 |