← All advisories

High severity7.1NVD Advisory· Published Jun 26, 2023· Updated Jun 17, 2026

CVE-2023-29430

CVE-2023-29430

Description

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in CTHthemes TheRoof theme <= 1.0.3 versions.

Affected products

3

Crafthemes/Theroof2 versions
cpe:2.3:a:cththemes:theroof:*:*:*:*:*:wordpress:*:*+ 1 more
- cpe:2.3:a:cththemes:theroof:*:*:*:*:*:wordpress:*:*range: <=1.0.3
- (no CPE)range: n/a
WordPress/TheRoofllm-create
Range: <=1.0.3

Patches

Vulnerability mechanics

References

1

patchstack.com/database/vulnerability/theroof/wordpress-theroof-theme-1-0-3-reflected-cross-site-scripting-xss-vulnerabilitynvdThird Party Advisory

News mentions

0

No linked articles in our index yet.