Description (CNA)
The "Design Scuole Italia" WordPress theme is affected by a Reflected XSS vulnerability in the filters-scheda-didattica.php file, allowing an unauthenticated attacker to execute arbitrary JavaScript in a victim's browser via a crafted URL containing a malicious archive parameter.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Developers Italia / design-scuole-wordpress-theme | affected 1.0 through 2.18.2 |
CWE
CWE-79
References
- https://github.com/italia/design-scuole-wordpress-theme
- https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-nel-tema-wordpress-design-scuole-italia-
ADP enrichment
No English description supplied.
No references supplied.