theme

Parallelus Salutation Vulnerabilities

2 known security issues reported for the Parallelus Salutation WordPress theme. Most recent disclosed Jul 31, 2017.

2 medium

Running Parallelus Salutation on your site? Check whether your installed version is affected.

Scan your site free

Salutation Responsive WordPress Theme < 3.0.16 - Authenticated Stored Cross-Site Scripting

medium

Stored XSS in Salutation Responsive WordPress + BuddyPress Theme version 3.0.15 could allow logged-in users to do almost anything an admin can.

CVSS:
6.4
Affected:
up to 3.0.16
Fixed in:
3.0.16
Disclosed:
Jul 31, 2017

CVE-2017-1000227 on NVD →

Parallelus Unite, Interscet, Traject, & Salutation < 2.0 - Reflected Cross-Site Scripting

medium

The Parallelus Unite, Intersect, Traject, & Salutation Premium WordPress Themes for WordPress are vulnerable to Reflected Cross-Site Scripting in versions up to 2.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts that execu...

CVSS:
6.1
Affected:
up to 2.0
Fixed in:
2.0
Disclosed:
Oct 2, 2012

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database