6.3
Moyenne
CVE-2024-2234 The Himer WordPress theme before 2.1.1 does not sanitise and escape some of its Post settings, which could allow high…
Description
The Himer WordPress theme before 2.1.1 does not sanitise and escape some of its Post settings, which could allow high privilege users such as Contributor to perform Stored Cross-Site Scripting attacks
Produits et versions touchés
Autres CVE de Himer
Les 7 CVE de Himer →
CVE-2024-2232
The lacks CSRF checks allowing a user to invite any user to any group (including private groups)
8.1
Élevée
CVE-2024-2233
The Himer WordPress theme before 2.1.1 does not have CSRF checks in some places, which could allow attackers to make…
6.3
Moyenne
CVE-2024-2235
The Himer WordPress theme before 2.1.1 does not have CSRF checks in some places, which could allow attackers to make…
6.3
Moyenne
CVE-2024-2231
The allows any authenticated user to join a private group due to a missing authorization check on a function
6.5
Moyenne