Aller au contenu
Se connecter
4.8 Moyenne

CVE-2024-2263 Themify WordPress plugin before 1.4.4 does not sanitise and escape a parameter before outputting it back in the page,…

Description

Themify WordPress plugin before 1.4.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin

Produits et versions touchés

Produit Versions touchées Corrigé en
Themify 1.4 premières → < 1.4.4 1.4.4
woocommerce_product_filter 1.4 premières → < 1.4.4 1.4.4

Autres CVE de Themify

Les 3 CVE de Themify →
CVE-2024-2278 Themify WordPress plugin before 1.4.4 does not sanitise and escape some of its Filters settings, which could allow high… 6.1 Moyenne CVE-2024-2262 Themify WordPress plugin before 1.4.4 does not have CSRF check in its bulk action, which could allow attackers to… 4.7 Moyenne
Suivre cette CVE