CVE-2023-2813 (GCVE-0-2023-2813)

Vulnerability from cvelistv5 – Published: 2023-09-04 11:27 – Updated: 2024-08-02 06:33
VLAI?
Summary
All of the above Aapna WordPress theme through 1.3, Anand WordPress theme through 1.2, Anfaust WordPress theme through 1.1, Arendelle WordPress theme before 1.1.13, Atlast Business WordPress theme through 1.5.8.5, Bazaar Lite WordPress theme before 1.8.6, Brain Power WordPress theme through 1.2, BunnyPressLite WordPress theme before 2.1, Cafe Bistro WordPress theme before 1.1.4, College WordPress theme before 1.5.1, Connections Reloaded WordPress theme through 3.1, Counterpoint WordPress theme through 1.8.1, Digitally WordPress theme through 1.0.8, Directory WordPress theme before 3.0.2, Drop WordPress theme before 1.22, Everse WordPress theme before 1.2.4, Fashionable Store WordPress theme through 1.3.4, Fullbase WordPress theme before 1.2.1, Ilex WordPress theme before 1.4.2, Js O3 Lite WordPress theme through 1.5.8.2, Js Paper WordPress theme through 2.5.7, Kata WordPress theme before 1.2.9, Kata App WordPress theme through 1.0.5, Kata Business WordPress theme through 1.0.2, Looki Lite WordPress theme before 1.3.0, moseter WordPress theme through 1.3.1, Nokke WordPress theme before 1.2.4, Nothing Personal WordPress theme through 1.0.7, Offset Writing WordPress theme through 1.2, Opor Ayam WordPress theme through 18, Pinzolo WordPress theme before 1.2.10, Plato WordPress theme before 1.1.9, Polka Dots WordPress theme through 1.2, Purity Of Soul WordPress theme through 1.9, Restaurant PT WordPress theme before 1.1.3, Saul WordPress theme before 1.1.0, Sean Lite WordPress theme before 1.4.6, Tantyyellow WordPress theme through 1.0.0.5, TIJAJI WordPress theme through 1.43, Tiki Time WordPress theme through 1.3, Tuaug4 WordPress theme through 1.4, Tydskrif WordPress theme through 1.1.3, UltraLight WordPress theme through 1.2, Venice Lite WordPress theme before 1.5.5, Viala WordPress theme through 1.3.1, viburno WordPress theme before 1.3.2, Wedding Bride WordPress theme before 1.0.2, Wlow WordPress theme before 1.2.7 suffer from the same issue about the search box reflecting the results causing XSS which allows an unauthenticated attacker to exploit against users if they click a malicious link.
Severity ?
No CVSS data available.
CWE
Assigner
References
https://wpscan.com/vulnerability/f434afd3-7de4-4b… exploitvdb-entrytechnical-description
Impacted products
Vendor Product Version
Unknown Aapna Affected: 0 , ≤ 1.3 (custom)
Create a notification for this product.
    Unknown Anand Affected: 0 , ≤ 1.2 (custom)
Create a notification for this product.
    Unknown Anfaust Affected: 0 , ≤ 1.1 (custom)
Create a notification for this product.
    Unknown Arendelle Affected: 0 , < 1.1.13 (custom)
Create a notification for this product.
    Unknown Atlast Business Affected: 0 , ≤ 1.5.8.5 (custom)
Create a notification for this product.
    Unknown Bazaar Lite Affected: 0 , < 1.8.6 (custom)
Create a notification for this product.
    Unknown Brain Power Affected: 0 , ≤ 1.2 (custom)
Create a notification for this product.
    Unknown BunnyPressLite Affected: 0 , < 2.1 (custom)
Create a notification for this product.
    Unknown Cafe Bistro Affected: 0 , < 1.1.4 (custom)
Create a notification for this product.
    Unknown College Affected: 0 , < 1.5.1 (custom)
Create a notification for this product.
    Unknown Connections Reloaded Affected: 0 , ≤ 3.1 (custom)
Create a notification for this product.
    Unknown Counterpoint Affected: 0 , ≤ 1.8.1 (custom)
Create a notification for this product.
    Unknown Digitally Affected: 0 , ≤ 1.0.8 (custom)
Create a notification for this product.
    Unknown Directory Affected: 0 , < 3.0.2 (custom)
Create a notification for this product.
    Unknown Drop Affected: 0 , < 1.22 (custom)
Create a notification for this product.
    Unknown Everse Affected: 0 , < 1.2.4 (custom)
Create a notification for this product.
    Unknown Fashionable Store Affected: 0 , ≤ 1.3.4 (custom)
Create a notification for this product.
    Unknown Fullbase Affected: 0 , < 1.2.1 (custom)
Create a notification for this product.
    Unknown Ilex Affected: 0 , < 1.4.2 (custom)
Create a notification for this product.
    Unknown Js O3 Lite Affected: 0 , ≤ 1.5.8.2 (custom)
Create a notification for this product.
    Unknown Js Paper Affected: 0 , ≤ 2.5.7 (custom)
Create a notification for this product.
    Unknown Kata Affected: 0 , < 1.2.9 (custom)
Create a notification for this product.
    Unknown Kata App Affected: 0 , ≤ 1.0.5 (custom)
Create a notification for this product.
    Unknown Kata Business Affected: 0 , ≤ 1.0.2 (custom)
Create a notification for this product.
    Unknown Looki Lite Affected: 0 , < 1.3.0 (custom)
Create a notification for this product.
    Unknown moseter Affected: 0 , ≤ 1.3.1 (custom)
Create a notification for this product.
    Unknown Nokke Affected: 0 , < 1.2.4 (custom)
Create a notification for this product.
    Unknown Nothing Personal Affected: 0 , ≤ 1.0.7 (custom)
Create a notification for this product.
    Unknown Offset Writing Affected: 0 , ≤ 1.2 (custom)
Create a notification for this product.
    Unknown Opor Ayam Affected: 0 , ≤ 1.8 (custom)
Create a notification for this product.
    Unknown Pinzolo Affected: 0 , < 1.2.10 (custom)
Create a notification for this product.
    Unknown Plato Affected: 0 , < 1.1.9 (custom)
Create a notification for this product.
    Unknown Polka Dots Affected: 0 , ≤ 1.2 (custom)
Create a notification for this product.
    Unknown Purity Of Soul Affected: 0 , ≤ 1.9 (custom)
Create a notification for this product.
    Unknown Restaurant PT Affected: 0 , < 1.1.3 (custom)
Create a notification for this product.
    Unknown Saul Affected: 0 , < 1.1.0 (custom)
Create a notification for this product.
    Unknown Sean Lite Affected: 0 , < 1.4.6 (custom)
Create a notification for this product.
    Unknown Tantyyellow Affected: 0 , ≤ 1.0.0.5 (custom)
Create a notification for this product.
    Unknown TIJAJI Affected: 0 , ≤ 1.43 (custom)
Create a notification for this product.
    Unknown Tiki Time Affected: 0 , ≤ 1.3 (custom)
Create a notification for this product.
    Unknown Tuaug4 Affected: 0 , ≤ 1.4 (custom)
Create a notification for this product.
    Unknown Tydskrif Affected: 0 , ≤ 1.1.3 (custom)
Create a notification for this product.
    Unknown UltraLight Affected: 0 , ≤ 1.2 (custom)
Create a notification for this product.
    Unknown Venice Lite Affected: 0 , < 1.5.5 (custom)
Create a notification for this product.
    Unknown Viala Affected: 0 , ≤ 1.3.1 (custom)
Create a notification for this product.
    Unknown viburno Affected: 0 , < 1.3.2 (custom)
Create a notification for this product.
    Unknown Wedding Bride Affected: 0 , < 1.0.2 (custom)
Create a notification for this product.
    Unknown Wlow Affected: 0 , < 1.2.7 (custom)
Create a notification for this product.
Credits
WPScan
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T06:33:05.593Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "exploit",
              "vdb-entry",
              "technical-description",
              "x_transferred"
            ],
            "url": "https://wpscan.com/vulnerability/f434afd3-7de4-4bf4-a9bb-9f9aeaae1dc5"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "affected",
          "product": "Aapna",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThanOrEqual": "1.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Anand",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThanOrEqual": "1.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Anfaust",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThanOrEqual": "1.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Arendelle",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "1.1.13",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Atlast Business",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThanOrEqual": "1.5.8.5",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Bazaar Lite",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "1.8.6",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Brain Power",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThanOrEqual": "1.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "BunnyPressLite",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "2.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Cafe Bistro",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "1.1.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "College",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "1.5.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Connections Reloaded",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThanOrEqual": "3.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Counterpoint",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThanOrEqual": "1.8.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Digitally",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThanOrEqual": "1.0.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Directory",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "3.0.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Drop",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "1.22",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Everse",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "1.2.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Fashionable Store",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThanOrEqual": "1.3.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Fullbase",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "1.2.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Ilex",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "1.4.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Js O3 Lite",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThanOrEqual": "1.5.8.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Js Paper",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThanOrEqual": "2.5.7",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Kata",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "1.2.9",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Kata App",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThanOrEqual": "1.0.5",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Kata Business",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThanOrEqual": "1.0.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Looki Lite",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "1.3.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "moseter",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThanOrEqual": "1.3.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Nokke",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "1.2.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Nothing Personal",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThanOrEqual": "1.0.7",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Offset Writing",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThanOrEqual": "1.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Opor Ayam",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThanOrEqual": "1.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Pinzolo",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "1.2.10",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Plato",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "1.1.9",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Polka Dots",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThanOrEqual": "1.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Purity Of Soul",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThanOrEqual": "1.9",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Restaurant PT",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "1.1.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Saul",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "1.1.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Sean Lite",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "1.4.6",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Tantyyellow",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThanOrEqual": "1.0.0.5",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "TIJAJI",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThanOrEqual": "1.43",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Tiki Time",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThanOrEqual": "1.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Tuaug4",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThanOrEqual": "1.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Tydskrif",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThanOrEqual": "1.1.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "UltraLight",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThanOrEqual": "1.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Venice Lite",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "1.5.5",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Viala",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThanOrEqual": "1.3.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "viburno",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "1.3.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Wedding Bride",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "1.0.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Wlow",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "1.2.7",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "coordinator",
          "value": "WPScan"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "All of the above Aapna WordPress theme through 1.3, Anand WordPress theme through 1.2, Anfaust WordPress theme through 1.1, Arendelle WordPress theme before 1.1.13, Atlast Business WordPress theme through 1.5.8.5, Bazaar Lite WordPress theme before 1.8.6, Brain Power WordPress theme through 1.2, BunnyPressLite WordPress theme before 2.1, Cafe Bistro WordPress theme before 1.1.4, College WordPress theme before 1.5.1, Connections Reloaded WordPress theme through 3.1, Counterpoint WordPress theme through 1.8.1, Digitally WordPress theme through 1.0.8, Directory WordPress theme before 3.0.2, Drop WordPress theme before 1.22, Everse WordPress theme before 1.2.4, Fashionable Store WordPress theme through 1.3.4, Fullbase WordPress theme before 1.2.1, Ilex WordPress theme before 1.4.2, Js O3 Lite WordPress theme through 1.5.8.2, Js Paper WordPress theme through 2.5.7, Kata WordPress theme before 1.2.9, Kata App WordPress theme through 1.0.5, Kata Business WordPress theme through 1.0.2, Looki Lite WordPress theme before 1.3.0, moseter WordPress theme through 1.3.1, Nokke WordPress theme before 1.2.4, Nothing Personal WordPress theme through 1.0.7, Offset Writing WordPress theme through 1.2, Opor Ayam WordPress theme through 18, Pinzolo WordPress theme before 1.2.10, Plato WordPress theme before 1.1.9, Polka Dots WordPress theme through 1.2, Purity Of Soul WordPress theme through 1.9, Restaurant PT WordPress theme before 1.1.3, Saul WordPress theme before 1.1.0, Sean Lite WordPress theme before 1.4.6, Tantyyellow WordPress theme through 1.0.0.5, TIJAJI WordPress theme through 1.43, Tiki Time WordPress theme through 1.3, Tuaug4 WordPress theme through 1.4, Tydskrif WordPress theme through 1.1.3, UltraLight WordPress theme through 1.2, Venice Lite WordPress theme before 1.5.5, Viala WordPress theme through 1.3.1, viburno WordPress theme before 1.3.2, Wedding Bride WordPress theme before 1.0.2, Wlow WordPress theme before 1.2.7 suffer from the same issue about the search box reflecting the results causing XSS which allows an unauthenticated attacker to exploit against users if they click a malicious link."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-79 Cross-Site Scripting (XSS)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-09-04T23:14:28.981Z",
        "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
        "shortName": "WPScan"
      },
      "references": [
        {
          "tags": [
            "exploit",
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://wpscan.com/vulnerability/f434afd3-7de4-4bf4-a9bb-9f9aeaae1dc5"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Multiple Themes - Reflected XSS",
      "x_generator": {
        "engine": "WPScan CVE Generator"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
    "assignerShortName": "WPScan",
    "cveId": "CVE-2023-2813",
    "datePublished": "2023-09-04T11:27:00.276Z",
    "dateReserved": "2023-05-19T14:02:35.923Z",
    "dateUpdated": "2024-08-02T06:33:05.593Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ajaydsouza:connections_reloaded:*:*:*:*:*:wordpress:*:*\", \"versionEndIncluding\": \"3.1\", \"matchCriteriaId\": \"FC619990-8F11-4698-BCEF-3B8DD5C59329\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:archimidismertzanos:atlast_business:*:*:*:*:*:wordpress:*:*\", \"versionEndIncluding\": \"1.5.8.5\", \"matchCriteriaId\": \"DDEE57D1-B2F5-4BD2-9EF1-B8E4AB75073C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:archimidismertzanos:fashionable_store:*:*:*:*:*:wordpress:*:*\", \"versionEndIncluding\": \"1.3.4\", \"matchCriteriaId\": \"BBB68EBA-C10F-4AB8-971B-EA6176A71E1D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:archimidismertzanos:nothing_personal:*:*:*:*:*:wordpress:*:*\", \"versionEndIncluding\": \"1.0.7\", \"matchCriteriaId\": \"C0F40F7A-8CEF-4A84-93D4-F49D2114BE69\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:arthousewebdesign:brain_power:*:*:*:*:*:wordpress:*:*\", \"versionEndIncluding\": \"1.2\", \"matchCriteriaId\": \"4CCF6D05-1D7B-4047-8BBD-86BCCBF866F9\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:asmedia:moseter:*:*:*:*:*:wordpress:*:*\", \"versionEndIncluding\": \"1.3.1\", \"matchCriteriaId\": \"ECD82D25-6B02-49FD-835E-A1D4C445FF8C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:asmedia:tuaug4:*:*:*:*:*:wordpress:*:*\", \"versionEndIncluding\": \"1.4\", \"matchCriteriaId\": \"68145A42-BC69-40EA-8695-31C425D01FCA\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ayecode:cafe_bistro:*:*:*:*:*:wordpress:*:*\", \"versionEndExcluding\": \"1.1.4\", \"matchCriteriaId\": \"EC1DF84C-3A23-4A8E-A54A-7BC185F53ADA\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ayecode:college:*:*:*:*:*:wordpress:*:*\", \"versionEndExcluding\": \"1.5.1\", \"matchCriteriaId\": \"9CEA1A3F-6AFD-4194-9292-EA6C8456D765\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ayecode:directory:*:*:*:*:*:wordpress:*:*\", \"versionEndExcluding\": \"3.0.2\", \"matchCriteriaId\": \"C395E13F-EEA7-4DC5-9230-B59402C84168\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ayecode:plato:*:*:*:*:*:wordpress:*:*\", \"versionEndExcluding\": \"1.1.9\", \"matchCriteriaId\": \"45E8EAFF-63D6-4899-BFBF-09B620F217F0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ayecode:restaurant_pt:*:*:*:*:*:wordpress:*:*\", \"versionEndExcluding\": \"1.1.3\", \"matchCriteriaId\": \"8CE7D44C-0932-4CDD-BA72-49E234E0C426\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ayecode:wedding_bride:*:*:*:*:*:wordpress:*:*\", \"versionEndExcluding\": \"1.0.2\", \"matchCriteriaId\": \"EE07BCB9-4215-4AE0-805D-FBD5DD285EBD\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:climaxthemes:kata:*:*:*:*:*:wordpress:*:*\", \"versionEndExcluding\": \"1.2.9\", \"matchCriteriaId\": \"DC35CC33-E529-4F62-95BE-998515CB6EB5\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:competethemes:drop:*:*:*:*:*:wordpress:*:*\", \"versionEndExcluding\": \"1.22\", \"matchCriteriaId\": \"218E633E-35E3-4A83-9FAA-75B63C94274F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:davidgarlitz:viala:*:*:*:*:*:wordpress:*:*\", \"versionEndIncluding\": \"1.3.1\", \"matchCriteriaId\": \"23BCA780-5DB4-4230-83AF-5406A6FF7462\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:deothemes:arendelle:*:*:*:*:*:wordpress:*:*\", \"versionEndExcluding\": \"1.1.13\", \"matchCriteriaId\": \"FE702DF3-7E40-46C8-810F-64B27D637D6F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:deothemes:everse:*:*:*:*:*:wordpress:*:*\", \"versionEndExcluding\": \"1.2.4\", \"matchCriteriaId\": \"CD63208F-9340-4BDE-B35F-D8DBD3741199\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:deothemes:nokke:*:*:*:*:*:wordpress:*:*\", \"versionEndExcluding\": \"1.2.4\", \"matchCriteriaId\": \"10724AAE-A344-4568-8144-30E459375D34\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:dotecsa:ilex:*:*:*:*:*:wordpress:*:*\", \"versionEndExcluding\": \"1.4.2\", \"matchCriteriaId\": \"F424B5F2-4F0F-44B4-90E6-7A1981E55BCA\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:dotecsa:viburno:*:*:*:*:*:wordpress:*:*\", \"versionEndExcluding\": \"1.3.2\", \"matchCriteriaId\": \"590A1188-B585-4B9C-AEC1-F5181DBCAC1C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:fredriksoerlie:ultralight:*:*:*:*:*:wordpress:*:*\", \"versionEndIncluding\": \"1.2\", \"matchCriteriaId\": \"6F5F6918-F402-4C23-B338-D40403822B57\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:fyrewurks:polka_dots:*:*:*:*:*:wordpress:*:*\", \"versionEndIncluding\": \"1.2\", \"matchCriteriaId\": \"CDBF89FE-41D5-40DF-81B4-074D43773C69\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:fyrewurks:tiki_time:*:*:*:*:*:wordpress:*:*\", \"versionEndIncluding\": \"1.3\", \"matchCriteriaId\": \"31D78289-FD0A-4A1F-A40D-4301035C7E53\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:henleythemes:counterpoint:*:*:*:*:*:wordpress:*:*\", \"versionEndIncluding\": \"1.8.1\", \"matchCriteriaId\": \"B323551D-143E-433F-BE74-085A8F51C701\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:iznyn:opor_ayam:*:*:*:*:*:wordpress:*:*\", \"versionEndIncluding\": \"1.8\", \"matchCriteriaId\": \"3598764E-DCDC-4573-B70F-8280361DB21C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:iznyn:purity_of_soul:*:*:*:*:*:wordpress:*:*\", \"versionEndIncluding\": \"1.9\", \"matchCriteriaId\": \"0474A022-A2EB-4AF0-963A-47E1FAA8A2B2\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:jinwen:js_o3_lite:*:*:*:*:*:wordpress:*:*\", \"versionEndIncluding\": \"1.5.8.2\", \"matchCriteriaId\": \"13ADCF9B-2041-4E16-8A62-DE398959E59C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:jinwen:js_paper:*:*:*:*:*:wordpress:*:*\", \"versionEndIncluding\": \"2.5.7\", \"matchCriteriaId\": \"F1455721-3008-44D4-80F1-DA943BF3BFE1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:marchettidesign:fullbase:*:*:*:*:*:wordpress:*:*\", \"versionEndExcluding\": \"1.2.1\", \"matchCriteriaId\": \"6CD196CC-3D41-4EC8-A237-54A7BD522099\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:marchettidesign:wlow:*:*:*:*:*:wordpress:*:*\", \"versionEndExcluding\": \"1.2.7\", \"matchCriteriaId\": \"377EAF0E-BA22-459F-89A6-D15D4090C804\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:omarfolgheraiter:digitally:*:*:*:*:*:wordpress:*:*\", \"versionEndIncluding\": \"1.0.8\", \"matchCriteriaId\": \"07ED0214-C2DD-40BC-86EE-AAD622D25C22\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:saumendra:aapna:*:*:*:*:*:wordpress:*:*\", \"versionEndIncluding\": \"1.3\", \"matchCriteriaId\": \"B082473E-6F4C-4448-8766-1FBE89E1D10E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:saumendra:anand:*:*:*:*:*:wordpress:*:*\", \"versionEndIncluding\": \"1.2\", \"matchCriteriaId\": \"BEF23F81-03A8-4DCC-8F98-715234FDC43C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:ta2g:tantyyellow:*:*:*:*:*:wordpress:*:*\", \"versionEndIncluding\": \"1.0.0.5\", \"matchCriteriaId\": \"9CFDBE4A-3E8A-41FC-8BCF-6507A8508FE2\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:themeinprogress:bazaar_lite:*:*:*:*:*:wordpress:*:*\", \"versionEndExcluding\": \"1.8.6\", \"matchCriteriaId\": \"C2E7C397-B7C3-4493-8E87-1D8C7D14113E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:themeinprogress:looki_lite:*:*:*:*:*:wordpress:*:*\", \"versionEndExcluding\": \"1.3.0\", \"matchCriteriaId\": \"2688B0AA-6821-4D75-9DF6-00EA981CE167\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:themeinprogress:saul:*:*:*:*:*:wordpress:*:*\", \"versionEndExcluding\": \"1.1.0\", \"matchCriteriaId\": \"EA8E3526-7407-4F58-890D-A9BFA4A5E6D7\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:themeinprogress:saul_lite:*:*:*:*:*:wordpress:*:*\", \"versionEndExcluding\": \"1.4.6\", \"matchCriteriaId\": \"ABEA7EF0-8167-49C6-A525-4DF0A7B7333C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:themeinprogress:venice_lite:*:*:*:*:*:wordpress:*:*\", \"versionEndIncluding\": \"1.5.5\", \"matchCriteriaId\": \"AED2D2B5-DD92-499D-B2A5-5DC2CB36FF5B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:thewebhunter:anfaust:*:*:*:*:*:wordpress:*:*\", \"versionEndIncluding\": \"1.1\", \"matchCriteriaId\": \"4CD69ED8-2D09-4581-AEFF-A5D732925D0F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:thewebhunter:offset_writing:*:*:*:*:*:wordpress:*:*\", \"versionEndIncluding\": \"1.2\", \"matchCriteriaId\": \"1ECC9918-D427-474B-9203-E252DE124A5B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:thriveweb:pinzolo:*:*:*:*:*:wordpress:*:*\", \"versionEndExcluding\": \"1.2.10\", \"matchCriteriaId\": \"437914C2-EDB1-463D-8042-5F57C84E869B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:tijaji:tijaji:*:*:*:*:*:wordpress:*:*\", \"versionEndIncluding\": \"1.43\", \"matchCriteriaId\": \"E894F192-8011-4B01-983F-83AE1D0FF4E5\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:wpmole:tydskrif:*:*:*:*:*:wordpress:*:*\", \"versionEndIncluding\": \"1.1.3\", \"matchCriteriaId\": \"54533C40-8291-423B-9654-B8755DEB6848\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:yws:bunnypress_lite:*:*:*:*:*:wordpress:*:*\", \"versionEndIncluding\": \"2.1\", \"matchCriteriaId\": \"FA21C775-16E5-44C4-B54A-6EB21FD6149D\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"All of the above Aapna WordPress theme through 1.3, Anand WordPress theme through 1.2, Anfaust WordPress theme through 1.1, Arendelle WordPress theme before 1.1.13, Atlast Business WordPress theme through 1.5.8.5, Bazaar Lite WordPress theme before 1.8.6, Brain Power WordPress theme through 1.2, BunnyPressLite WordPress theme before 2.1, Cafe Bistro WordPress theme before 1.1.4, College WordPress theme before 1.5.1, Connections Reloaded WordPress theme through 3.1, Counterpoint WordPress theme through 1.8.1, Digitally WordPress theme through 1.0.8, Directory WordPress theme before 3.0.2, Drop WordPress theme before 1.22, Everse WordPress theme before 1.2.4, Fashionable Store WordPress theme through 1.3.4, Fullbase WordPress theme before 1.2.1, Ilex WordPress theme before 1.4.2, Js O3 Lite WordPress theme through 1.5.8.2, Js Paper WordPress theme through 2.5.7, Kata WordPress theme before 1.2.9, Kata App WordPress theme through 1.0.5, Kata Business WordPress theme through 1.0.2, Looki Lite WordPress theme before 1.3.0, moseter WordPress theme through 1.3.1, Nokke WordPress theme before 1.2.4, Nothing Personal WordPress theme through 1.0.7, Offset Writing WordPress theme through 1.2, Opor Ayam WordPress theme through 18, Pinzolo WordPress theme before 1.2.10, Plato WordPress theme before 1.1.9, Polka Dots WordPress theme through 1.2, Purity Of Soul WordPress theme through 1.9, Restaurant PT WordPress theme before 1.1.3, Saul WordPress theme before 1.1.0, Sean Lite WordPress theme before 1.4.6, Tantyyellow WordPress theme through 1.0.0.5, TIJAJI WordPress theme through 1.43, Tiki Time WordPress theme through 1.3, Tuaug4 WordPress theme through 1.4, Tydskrif WordPress theme through 1.1.3, UltraLight WordPress theme through 1.2, Venice Lite WordPress theme before 1.5.5, Viala WordPress theme through 1.3.1, viburno WordPress theme before 1.3.2, Wedding Bride WordPress theme before 1.0.2, Wlow WordPress theme before 1.2.7 suffer from the same issue about the search box reflecting the results causing XSS which allows an unauthenticated attacker to exploit against users if they click a malicious link.\"}, {\"lang\": \"es\", \"value\": \"Todo lo anterior: Tema de WordPress de Aapna hasta 1.3, Tema de WordPress de Anand hasta 1.2, Tema de WordPress de Anfaust hasta 1.1, Tema de WordPress de Arendelle antes de 1.1.13, Tema de WordPress de Atlast Business hasta 1.5.8.5, Tema de WordPress de Bazaar Lite antes de 1.8.6, Tema de WordPress de Brain Power hasta 1.2, tema de WordPress BunnyPressLite anterior a 2.1, tema de WordPress Cafe Bistro anterior a 1.1.4, tema de WordPress College anterior a 1.5.1, tema de WordPress Connections Reloaded hasta 3.1, tema de WordPress Counterpoint hasta 1.8.1, tema de WordPress digital hasta 1.0.8 , Tema Directory WordPress anterior a 3.0.2, Tema Drop WordPress anterior a 1.22, Tema Everse WordPress anterior a 1.2.4, Tema Fashionable Store WordPress hasta 1.3.4, Tema Fullbase WordPress anterior a 1.2.1, Tema Ilex WordPress anterior a 1.4.2, Tema Js O3 Lite WordPress hasta 1.5.8.2, tema Js Paper WordPress hasta 2.5.7, tema Kata WordPress anterior a 1.2.9, tema Kata App WordPress hasta 1.0.5, tema Kata Business WordPress hasta 1.0.2, tema Looki Lite WordPress anterior a 1.3. 0, tema de WordPress moseter hasta 1.3.1, tema de WordPress Nokke anterior a 1.2.4, tema de WordPress Nothing Personal hasta 1.0.7, tema de WordPress Offset Writing hasta 1.2, tema de WordPress Opor Ayam hasta 18, tema de WordPress Pinzolo anterior a 1.2.10, Plato Tema de WordPress anterior a 1.1.9, tema de WordPress Polka Dots hasta 1.2, tema de WordPress Purity Of Soul hasta 1.9, tema de WordPress Restaurant PT anterior a 1.1.3, tema de WordPress Saul anterior a 1.1.0, tema de WordPress Sean Lite anterior a 1.4.6, tema de WordPress TantyYellow tema hasta 1.0.0.5, tema TIJAJI WordPress hasta 1.43, tema Tiki Time WordPress hasta 1.3, tema Tuaug4 WordPress hasta 1.4, tema Tydskrif WordPress hasta 1.1.3, tema UltraLight WordPress hasta 1.2, tema Venice Lite WordPress antes 1.5.5, tema Viala de WordPress hasta 1.3.1, tema viburno de Wordpress anterior a 1.3.2, el tema de WordPress Wedding Bride anterior a 1.0.2, el tema de WordPress Wlow anterior a 1.2.7 sufren el mismo problema en el cuadro de b\\u00fasqueda que refleja los resultados, lo que provoca XSS, lo que permite a un atacante no autenticado explotar contra los usuarios si hacen clic en un enlace malicioso.\"}]",
      "id": "CVE-2023-2813",
      "lastModified": "2024-11-21T07:59:20.313",
      "metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N\", \"baseScore\": 6.1, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"REQUIRED\", \"scope\": \"CHANGED\", \"confidentialityImpact\": \"LOW\", \"integrityImpact\": \"LOW\", \"availabilityImpact\": \"NONE\"}, \"exploitabilityScore\": 2.8, \"impactScore\": 2.7}]}",
      "published": "2023-09-04T12:15:08.997",
      "references": "[{\"url\": \"https://wpscan.com/vulnerability/f434afd3-7de4-4bf4-a9bb-9f9aeaae1dc5\", \"source\": \"contact@wpscan.com\", \"tags\": [\"Exploit\", \"Third Party Advisory\"]}, {\"url\": \"https://wpscan.com/vulnerability/f434afd3-7de4-4bf4-a9bb-9f9aeaae1dc5\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Exploit\", \"Third Party Advisory\"]}]",
      "sourceIdentifier": "contact@wpscan.com",
      "vulnStatus": "Modified"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2023-2813\",\"sourceIdentifier\":\"contact@wpscan.com\",\"published\":\"2023-09-04T12:15:08.997\",\"lastModified\":\"2024-11-21T07:59:20.313\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"All of the above Aapna WordPress theme through 1.3, Anand WordPress theme through 1.2, Anfaust WordPress theme through 1.1, Arendelle WordPress theme before 1.1.13, Atlast Business WordPress theme through 1.5.8.5, Bazaar Lite WordPress theme before 1.8.6, Brain Power WordPress theme through 1.2, BunnyPressLite WordPress theme before 2.1, Cafe Bistro WordPress theme before 1.1.4, College WordPress theme before 1.5.1, Connections Reloaded WordPress theme through 3.1, Counterpoint WordPress theme through 1.8.1, Digitally WordPress theme through 1.0.8, Directory WordPress theme before 3.0.2, Drop WordPress theme before 1.22, Everse WordPress theme before 1.2.4, Fashionable Store WordPress theme through 1.3.4, Fullbase WordPress theme before 1.2.1, Ilex WordPress theme before 1.4.2, Js O3 Lite WordPress theme through 1.5.8.2, Js Paper WordPress theme through 2.5.7, Kata WordPress theme before 1.2.9, Kata App WordPress theme through 1.0.5, Kata Business WordPress theme through 1.0.2, Looki Lite WordPress theme before 1.3.0, moseter WordPress theme through 1.3.1, Nokke WordPress theme before 1.2.4, Nothing Personal WordPress theme through 1.0.7, Offset Writing WordPress theme through 1.2, Opor Ayam WordPress theme through 18, Pinzolo WordPress theme before 1.2.10, Plato WordPress theme before 1.1.9, Polka Dots WordPress theme through 1.2, Purity Of Soul WordPress theme through 1.9, Restaurant PT WordPress theme before 1.1.3, Saul WordPress theme before 1.1.0, Sean Lite WordPress theme before 1.4.6, Tantyyellow WordPress theme through 1.0.0.5, TIJAJI WordPress theme through 1.43, Tiki Time WordPress theme through 1.3, Tuaug4 WordPress theme through 1.4, Tydskrif WordPress theme through 1.1.3, UltraLight WordPress theme through 1.2, Venice Lite WordPress theme before 1.5.5, Viala WordPress theme through 1.3.1, viburno WordPress theme before 1.3.2, Wedding Bride WordPress theme before 1.0.2, Wlow WordPress theme before 1.2.7 suffer from the same issue about the search box reflecting the results causing XSS which allows an unauthenticated attacker to exploit against users if they click a malicious link.\"},{\"lang\":\"es\",\"value\":\"Todo lo anterior: Tema de WordPress de Aapna hasta 1.3, Tema de WordPress de Anand hasta 1.2, Tema de WordPress de Anfaust hasta 1.1, Tema de WordPress de Arendelle antes de 1.1.13, Tema de WordPress de Atlast Business hasta 1.5.8.5, Tema de WordPress de Bazaar Lite antes de 1.8.6, Tema de WordPress de Brain Power hasta 1.2, tema de WordPress BunnyPressLite anterior a 2.1, tema de WordPress Cafe Bistro anterior a 1.1.4, tema de WordPress College anterior a 1.5.1, tema de WordPress Connections Reloaded hasta 3.1, tema de WordPress Counterpoint hasta 1.8.1, tema de WordPress digital hasta 1.0.8 , Tema Directory WordPress anterior a 3.0.2, Tema Drop WordPress anterior a 1.22, Tema Everse WordPress anterior a 1.2.4, Tema Fashionable Store WordPress hasta 1.3.4, Tema Fullbase WordPress anterior a 1.2.1, Tema Ilex WordPress anterior a 1.4.2, Tema Js O3 Lite WordPress hasta 1.5.8.2, tema Js Paper WordPress hasta 2.5.7, tema Kata WordPress anterior a 1.2.9, tema Kata App WordPress hasta 1.0.5, tema Kata Business WordPress hasta 1.0.2, tema Looki Lite WordPress anterior a 1.3. 0, tema de WordPress moseter hasta 1.3.1, tema de WordPress Nokke anterior a 1.2.4, tema de WordPress Nothing Personal hasta 1.0.7, tema de WordPress Offset Writing hasta 1.2, tema de WordPress Opor Ayam hasta 18, tema de WordPress Pinzolo anterior a 1.2.10, Plato Tema de WordPress anterior a 1.1.9, tema de WordPress Polka Dots hasta 1.2, tema de WordPress Purity Of Soul hasta 1.9, tema de WordPress Restaurant PT anterior a 1.1.3, tema de WordPress Saul anterior a 1.1.0, tema de WordPress Sean Lite anterior a 1.4.6, tema de WordPress TantyYellow tema hasta 1.0.0.5, tema TIJAJI WordPress hasta 1.43, tema Tiki Time WordPress hasta 1.3, tema Tuaug4 WordPress hasta 1.4, tema Tydskrif WordPress hasta 1.1.3, tema UltraLight WordPress hasta 1.2, tema Venice Lite WordPress antes 1.5.5, tema Viala de WordPress hasta 1.3.1, tema viburno de Wordpress anterior a 1.3.2, el tema de WordPress Wedding Bride anterior a 1.0.2, el tema de WordPress Wlow anterior a 1.2.7 sufren el mismo problema en el cuadro de b\u00fasqueda que refleja los resultados, lo que provoca XSS, lo que permite a un atacante no autenticado explotar contra los usuarios si hacen clic en un enlace malicioso.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N\",\"baseScore\":6.1,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":2.8,\"impactScore\":2.7}]},\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ajaydsouza:connections_reloaded:*:*:*:*:*:wordpress:*:*\",\"versionEndIncluding\":\"3.1\",\"matchCriteriaId\":\"FC619990-8F11-4698-BCEF-3B8DD5C59329\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:archimidismertzanos:atlast_business:*:*:*:*:*:wordpress:*:*\",\"versionEndIncluding\":\"1.5.8.5\",\"matchCriteriaId\":\"DDEE57D1-B2F5-4BD2-9EF1-B8E4AB75073C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:archimidismertzanos:fashionable_store:*:*:*:*:*:wordpress:*:*\",\"versionEndIncluding\":\"1.3.4\",\"matchCriteriaId\":\"BBB68EBA-C10F-4AB8-971B-EA6176A71E1D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:archimidismertzanos:nothing_personal:*:*:*:*:*:wordpress:*:*\",\"versionEndIncluding\":\"1.0.7\",\"matchCriteriaId\":\"C0F40F7A-8CEF-4A84-93D4-F49D2114BE69\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:arthousewebdesign:brain_power:*:*:*:*:*:wordpress:*:*\",\"versionEndIncluding\":\"1.2\",\"matchCriteriaId\":\"4CCF6D05-1D7B-4047-8BBD-86BCCBF866F9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:asmedia:moseter:*:*:*:*:*:wordpress:*:*\",\"versionEndIncluding\":\"1.3.1\",\"matchCriteriaId\":\"ECD82D25-6B02-49FD-835E-A1D4C445FF8C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:asmedia:tuaug4:*:*:*:*:*:wordpress:*:*\",\"versionEndIncluding\":\"1.4\",\"matchCriteriaId\":\"68145A42-BC69-40EA-8695-31C425D01FCA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ayecode:cafe_bistro:*:*:*:*:*:wordpress:*:*\",\"versionEndExcluding\":\"1.1.4\",\"matchCriteriaId\":\"EC1DF84C-3A23-4A8E-A54A-7BC185F53ADA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ayecode:college:*:*:*:*:*:wordpress:*:*\",\"versionEndExcluding\":\"1.5.1\",\"matchCriteriaId\":\"9CEA1A3F-6AFD-4194-9292-EA6C8456D765\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ayecode:directory:*:*:*:*:*:wordpress:*:*\",\"versionEndExcluding\":\"3.0.2\",\"matchCriteriaId\":\"C395E13F-EEA7-4DC5-9230-B59402C84168\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ayecode:plato:*:*:*:*:*:wordpress:*:*\",\"versionEndExcluding\":\"1.1.9\",\"matchCriteriaId\":\"45E8EAFF-63D6-4899-BFBF-09B620F217F0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ayecode:restaurant_pt:*:*:*:*:*:wordpress:*:*\",\"versionEndExcluding\":\"1.1.3\",\"matchCriteriaId\":\"8CE7D44C-0932-4CDD-BA72-49E234E0C426\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ayecode:wedding_bride:*:*:*:*:*:wordpress:*:*\",\"versionEndExcluding\":\"1.0.2\",\"matchCriteriaId\":\"EE07BCB9-4215-4AE0-805D-FBD5DD285EBD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:climaxthemes:kata:*:*:*:*:*:wordpress:*:*\",\"versionEndExcluding\":\"1.2.9\",\"matchCriteriaId\":\"DC35CC33-E529-4F62-95BE-998515CB6EB5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:competethemes:drop:*:*:*:*:*:wordpress:*:*\",\"versionEndExcluding\":\"1.22\",\"matchCriteriaId\":\"218E633E-35E3-4A83-9FAA-75B63C94274F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:davidgarlitz:viala:*:*:*:*:*:wordpress:*:*\",\"versionEndIncluding\":\"1.3.1\",\"matchCriteriaId\":\"23BCA780-5DB4-4230-83AF-5406A6FF7462\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:deothemes:arendelle:*:*:*:*:*:wordpress:*:*\",\"versionEndExcluding\":\"1.1.13\",\"matchCriteriaId\":\"FE702DF3-7E40-46C8-810F-64B27D637D6F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:deothemes:everse:*:*:*:*:*:wordpress:*:*\",\"versionEndExcluding\":\"1.2.4\",\"matchCriteriaId\":\"CD63208F-9340-4BDE-B35F-D8DBD3741199\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:deothemes:nokke:*:*:*:*:*:wordpress:*:*\",\"versionEndExcluding\":\"1.2.4\",\"matchCriteriaId\":\"10724AAE-A344-4568-8144-30E459375D34\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:dotecsa:ilex:*:*:*:*:*:wordpress:*:*\",\"versionEndExcluding\":\"1.4.2\",\"matchCriteriaId\":\"F424B5F2-4F0F-44B4-90E6-7A1981E55BCA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:dotecsa:viburno:*:*:*:*:*:wordpress:*:*\",\"versionEndExcluding\":\"1.3.2\",\"matchCriteriaId\":\"590A1188-B585-4B9C-AEC1-F5181DBCAC1C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:fredriksoerlie:ultralight:*:*:*:*:*:wordpress:*:*\",\"versionEndIncluding\":\"1.2\",\"matchCriteriaId\":\"6F5F6918-F402-4C23-B338-D40403822B57\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:fyrewurks:polka_dots:*:*:*:*:*:wordpress:*:*\",\"versionEndIncluding\":\"1.2\",\"matchCriteriaId\":\"CDBF89FE-41D5-40DF-81B4-074D43773C69\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:fyrewurks:tiki_time:*:*:*:*:*:wordpress:*:*\",\"versionEndIncluding\":\"1.3\",\"matchCriteriaId\":\"31D78289-FD0A-4A1F-A40D-4301035C7E53\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:henleythemes:counterpoint:*:*:*:*:*:wordpress:*:*\",\"versionEndIncluding\":\"1.8.1\",\"matchCriteriaId\":\"B323551D-143E-433F-BE74-085A8F51C701\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:iznyn:opor_ayam:*:*:*:*:*:wordpress:*:*\",\"versionEndIncluding\":\"1.8\",\"matchCriteriaId\":\"3598764E-DCDC-4573-B70F-8280361DB21C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:iznyn:purity_of_soul:*:*:*:*:*:wordpress:*:*\",\"versionEndIncluding\":\"1.9\",\"matchCriteriaId\":\"0474A022-A2EB-4AF0-963A-47E1FAA8A2B2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:jinwen:js_o3_lite:*:*:*:*:*:wordpress:*:*\",\"versionEndIncluding\":\"1.5.8.2\",\"matchCriteriaId\":\"13ADCF9B-2041-4E16-8A62-DE398959E59C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:jinwen:js_paper:*:*:*:*:*:wordpress:*:*\",\"versionEndIncluding\":\"2.5.7\",\"matchCriteriaId\":\"F1455721-3008-44D4-80F1-DA943BF3BFE1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:marchettidesign:fullbase:*:*:*:*:*:wordpress:*:*\",\"versionEndExcluding\":\"1.2.1\",\"matchCriteriaId\":\"6CD196CC-3D41-4EC8-A237-54A7BD522099\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:marchettidesign:wlow:*:*:*:*:*:wordpress:*:*\",\"versionEndExcluding\":\"1.2.7\",\"matchCriteriaId\":\"377EAF0E-BA22-459F-89A6-D15D4090C804\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:omarfolgheraiter:digitally:*:*:*:*:*:wordpress:*:*\",\"versionEndIncluding\":\"1.0.8\",\"matchCriteriaId\":\"07ED0214-C2DD-40BC-86EE-AAD622D25C22\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:saumendra:aapna:*:*:*:*:*:wordpress:*:*\",\"versionEndIncluding\":\"1.3\",\"matchCriteriaId\":\"B082473E-6F4C-4448-8766-1FBE89E1D10E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:saumendra:anand:*:*:*:*:*:wordpress:*:*\",\"versionEndIncluding\":\"1.2\",\"matchCriteriaId\":\"BEF23F81-03A8-4DCC-8F98-715234FDC43C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:ta2g:tantyyellow:*:*:*:*:*:wordpress:*:*\",\"versionEndIncluding\":\"1.0.0.5\",\"matchCriteriaId\":\"9CFDBE4A-3E8A-41FC-8BCF-6507A8508FE2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:themeinprogress:bazaar_lite:*:*:*:*:*:wordpress:*:*\",\"versionEndExcluding\":\"1.8.6\",\"matchCriteriaId\":\"C2E7C397-B7C3-4493-8E87-1D8C7D14113E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:themeinprogress:looki_lite:*:*:*:*:*:wordpress:*:*\",\"versionEndExcluding\":\"1.3.0\",\"matchCriteriaId\":\"2688B0AA-6821-4D75-9DF6-00EA981CE167\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:themeinprogress:saul:*:*:*:*:*:wordpress:*:*\",\"versionEndExcluding\":\"1.1.0\",\"matchCriteriaId\":\"EA8E3526-7407-4F58-890D-A9BFA4A5E6D7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:themeinprogress:saul_lite:*:*:*:*:*:wordpress:*:*\",\"versionEndExcluding\":\"1.4.6\",\"matchCriteriaId\":\"ABEA7EF0-8167-49C6-A525-4DF0A7B7333C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:themeinprogress:venice_lite:*:*:*:*:*:wordpress:*:*\",\"versionEndIncluding\":\"1.5.5\",\"matchCriteriaId\":\"AED2D2B5-DD92-499D-B2A5-5DC2CB36FF5B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:thewebhunter:anfaust:*:*:*:*:*:wordpress:*:*\",\"versionEndIncluding\":\"1.1\",\"matchCriteriaId\":\"4CD69ED8-2D09-4581-AEFF-A5D732925D0F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:thewebhunter:offset_writing:*:*:*:*:*:wordpress:*:*\",\"versionEndIncluding\":\"1.2\",\"matchCriteriaId\":\"1ECC9918-D427-474B-9203-E252DE124A5B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:thriveweb:pinzolo:*:*:*:*:*:wordpress:*:*\",\"versionEndExcluding\":\"1.2.10\",\"matchCriteriaId\":\"437914C2-EDB1-463D-8042-5F57C84E869B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:tijaji:tijaji:*:*:*:*:*:wordpress:*:*\",\"versionEndIncluding\":\"1.43\",\"matchCriteriaId\":\"E894F192-8011-4B01-983F-83AE1D0FF4E5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:wpmole:tydskrif:*:*:*:*:*:wordpress:*:*\",\"versionEndIncluding\":\"1.1.3\",\"matchCriteriaId\":\"54533C40-8291-423B-9654-B8755DEB6848\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:yws:bunnypress_lite:*:*:*:*:*:wordpress:*:*\",\"versionEndIncluding\":\"2.1\",\"matchCriteriaId\":\"FA21C775-16E5-44C4-B54A-6EB21FD6149D\"}]}]}],\"references\":[{\"url\":\"https://wpscan.com/vulnerability/f434afd3-7de4-4bf4-a9bb-9f9aeaae1dc5\",\"source\":\"contact@wpscan.com\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]},{\"url\":\"https://wpscan.com/vulnerability/f434afd3-7de4-4bf4-a9bb-9f9aeaae1dc5\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]}]}}"
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.