- Record status
- Published
- Identifier year (not publication year)
- 2023
- Source publication
- Source updated
- Imported by cveboard
CNA source text (English)
Reflected Cross-Site Scripting vulnerability in multiple WordPress components by KlbTheme
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in KlbTheme Cosmetsy theme (core plugin), KlbTheme Partdo theme (core plugin), KlbTheme Bacola theme (core plugin), KlbTheme Medibazar theme (core plugin), KlbTheme Furnob theme (core plugin), KlbTheme Clotya theme (core plugin) allows Reflected XSS.This issue affects Cosmetsy theme (core plugin): from n/a through 1.3.0; Partdo theme (core plugin): from n/a through 1.0.9; Bacola theme (core plugin): from n/a through 1.3.3; Medibazar theme (core plugin): from n/a through 1.2.3; Furnob theme (core plugin): from n/a through 1.1.7; Clotya theme (core plugin): from n/a through 1.1.5.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Cosmetsy theme (core plugin)
- Vendor
- KlbTheme
- Product
- Cosmetsy theme (core plugin)
- Platforms
- Unknown
- Default status
unaffected
Cosmetsy theme (core plugin) · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| n/a | affected | custom | Unavailable | 1.3.0 | None listed |
|---|
Partdo theme (core plugin)
- Vendor
- KlbTheme
- Product
- Partdo theme (core plugin)
- Platforms
- Unknown
- Default status
unaffected
Partdo theme (core plugin) · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| n/a | affected | custom | Unavailable | 1.0.9 | None listed |
|---|
Bacola theme (core plugin)
- Vendor
- KlbTheme
- Product
- Bacola theme (core plugin)
- Platforms
- Unknown
- Default status
unaffected
Bacola theme (core plugin) · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| n/a | affected | custom | Unavailable | 1.3.3 | None listed |
|---|
Medibazar theme (core plugin)
- Vendor
- KlbTheme
- Product
- Medibazar theme (core plugin)
- Platforms
- Unknown
- Default status
unaffected
Medibazar theme (core plugin) · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| n/a | affected | custom | Unavailable | 1.2.3 | None listed |
|---|
Furnob theme (core plugin)
- Vendor
- KlbTheme
- Product
- Furnob theme (core plugin)
- Platforms
- Unknown
- Default status
unaffected
Furnob theme (core plugin) · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| n/a | affected | custom | Unavailable | 1.1.7 | None listed |
|---|
Clotya theme (core plugin)
- Vendor
- KlbTheme
- Product
- Clotya theme (core plugin)
- Platforms
- Unknown
- Default status
unaffected
Clotya theme (core plugin) · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| n/a | affected | custom | Unavailable | 1.1.5 | None listed |
|---|