Anih - Creative Agency WordPress Theme <= 2024 - Authenticated (Administrator+) Stored Cross-Site Scripting
mediumThe Anih - Creative Agency WordPress Theme theme for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2024 due to an incomplete blacklist, insufficient input sanitization, and output escaping. This makes it possible for authenticated attackers, with adminis...
- CVSS:
- 5.5
- Affected:
- up to 2024
- Fix:
- No patched version reported
- Disclosed:
- Nov 8, 2024