VYPR

Tainacan Interface

by WordPress

CVEs (1)

  • CVE-2024-3867MedApr 16, 2024
    risk 0.41cvss 6.1epss 0.01

    The archive-tainacan-collection theme for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in version 2.7.2. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in…