theme

Pool Vulnerabilities

2 known security issues reported for the Pool WordPress theme. Most recent disclosed Aug 22, 2007.

1 medium

Running Pool on your site? Check whether your installed version is affected.

Pool [pool] < 1.1

unknown

[en] Cross-site scripting (XSS) vulnerability in index.php in the Pool 1.0.7 theme for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO (PHP_SELF).

Affected:: up to 1.1
Fixed in:: 1.1
Disclosed:: Aug 22, 2007

CVE-2007-4482 on NVD →

Pool <= 1.0.7 - Reflected Cross-Site Scripting

medium

The Pool theme for WordPress is vulnerable to Reflected Cross-Site Scripting via PATH_INFO (PHP_SELF) in versions up to, and including, 1.0.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can...

CVSS:: 6.1
Affected:: up to 1.0.7
Fixed in:: 1.1
Disclosed:: Aug 13, 2007

CVE-2007-4482 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database