VYPR
Unrated severityNVD Advisory· Published Jul 3, 2024· Updated Aug 1, 2024

Himer - Social Questions and Answers < 2.1.1 - Contributor+ Stored XSS

CVE-2024-2234

Description

The Himer WordPress theme before 2.1.1 does not sanitise and escape some of its Post settings, which could allow high privilege users such as Contributor to perform Stored Cross-Site Scripting attacks

Affected products

1

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.