CVE-2023-2813
Multiple Themes - Reflected XSS
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
1Exploited in Wild
-Decision
Descriptions
All of the above Aapna WordPress theme through 1.3, Anand WordPress theme through 1.2, Anfaust WordPress theme through 1.1, Arendelle WordPress theme before 1.1.13, Atlast Business WordPress theme through 1.5.8.5, Bazaar Lite WordPress theme before 1.8.6, Brain Power WordPress theme through 1.2, BunnyPressLite WordPress theme before 2.1, Cafe Bistro WordPress theme before 1.1.4, College WordPress theme before 1.5.1, Connections Reloaded WordPress theme through 3.1, Counterpoint WordPress theme through 1.8.1, Digitally WordPress theme through 1.0.8, Directory WordPress theme before 3.0.2, Drop WordPress theme before 1.22, Everse WordPress theme before 1.2.4, Fashionable Store WordPress theme through 1.3.4, Fullbase WordPress theme before 1.2.1, Ilex WordPress theme before 1.4.2, Js O3 Lite WordPress theme through 1.5.8.2, Js Paper WordPress theme through 2.5.7, Kata WordPress theme before 1.2.9, Kata App WordPress theme through 1.0.5, Kata Business WordPress theme through 1.0.2, Looki Lite WordPress theme before 1.3.0, moseter WordPress theme through 1.3.1, Nokke WordPress theme before 1.2.4, Nothing Personal WordPress theme through 1.0.7, Offset Writing WordPress theme through 1.2, Opor Ayam WordPress theme through 18, Pinzolo WordPress theme before 1.2.10, Plato WordPress theme before 1.1.9, Polka Dots WordPress theme through 1.2, Purity Of Soul WordPress theme through 1.9, Restaurant PT WordPress theme before 1.1.3, Saul WordPress theme before 1.1.0, Sean Lite WordPress theme before 1.4.6, Tantyyellow WordPress theme through 1.0.0.5, TIJAJI WordPress theme through 1.43, Tiki Time WordPress theme through 1.3, Tuaug4 WordPress theme through 1.4, Tydskrif WordPress theme through 1.1.3, UltraLight WordPress theme through 1.2, Venice Lite WordPress theme before 1.5.5, Viala WordPress theme through 1.3.1, viburno WordPress theme before 1.3.2, Wedding Bride WordPress theme before 1.0.2, Wlow WordPress theme before 1.2.7 suffer from the same issue about the search box reflecting the results causing XSS which allows an unauthenticated attacker to exploit against users if they click a malicious link.
Todo lo anterior: Tema de WordPress de Aapna hasta 1.3, Tema de WordPress de Anand hasta 1.2, Tema de WordPress de Anfaust hasta 1.1, Tema de WordPress de Arendelle antes de 1.1.13, Tema de WordPress de Atlast Business hasta 1.5.8.5, Tema de WordPress de Bazaar Lite antes de 1.8.6, Tema de WordPress de Brain Power hasta 1.2, tema de WordPress BunnyPressLite anterior a 2.1, tema de WordPress Cafe Bistro anterior a 1.1.4, tema de WordPress College anterior a 1.5.1, tema de WordPress Connections Reloaded hasta 3.1, tema de WordPress Counterpoint hasta 1.8.1, tema de WordPress digital hasta 1.0.8 , Tema Directory WordPress anterior a 3.0.2, Tema Drop WordPress anterior a 1.22, Tema Everse WordPress anterior a 1.2.4, Tema Fashionable Store WordPress hasta 1.3.4, Tema Fullbase WordPress anterior a 1.2.1, Tema Ilex WordPress anterior a 1.4.2, Tema Js O3 Lite WordPress hasta 1.5.8.2, tema Js Paper WordPress hasta 2.5.7, tema Kata WordPress anterior a 1.2.9, tema Kata App WordPress hasta 1.0.5, tema Kata Business WordPress hasta 1.0.2, tema Looki Lite WordPress anterior a 1.3. 0, tema de WordPress moseter hasta 1.3.1, tema de WordPress Nokke anterior a 1.2.4, tema de WordPress Nothing Personal hasta 1.0.7, tema de WordPress Offset Writing hasta 1.2, tema de WordPress Opor Ayam hasta 18, tema de WordPress Pinzolo anterior a 1.2.10, Plato Tema de WordPress anterior a 1.1.9, tema de WordPress Polka Dots hasta 1.2, tema de WordPress Purity Of Soul hasta 1.9, tema de WordPress Restaurant PT anterior a 1.1.3, tema de WordPress Saul anterior a 1.1.0, tema de WordPress Sean Lite anterior a 1.4.6, tema de WordPress TantyYellow tema hasta 1.0.0.5, tema TIJAJI WordPress hasta 1.43, tema Tiki Time WordPress hasta 1.3, tema Tuaug4 WordPress hasta 1.4, tema Tydskrif WordPress hasta 1.1.3, tema UltraLight WordPress hasta 1.2, tema Venice Lite WordPress antes 1.5.5, tema Viala de WordPress hasta 1.3.1, tema viburno de Wordpress anterior a 1.3.2, el tema de WordPress Wedding Bride anterior a 1.0.2, el tema de WordPress Wlow anterior a 1.2.7 sufren el mismo problema en el cuadro de búsqueda que refleja los resultados, lo que provoca XSS, lo que permite a un atacante no autenticado explotar contra los usuarios si hacen clic en un enlace malicioso.
Multiple themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the search field in various versions due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2023-05-19 CVE Reserved
- 2023-08-14 CVE Published
- 2024-08-02 CVE Updated
- 2024-08-02 First Exploit
- 2024-09-10 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|---|---|
| https://wpscan.com/vulnerability/f434afd3-7de4-4bf4-a9bb-9f9aeaae1dc5 | 2024-08-02 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Ajaydsouza Search vendor "Ajaydsouza" | Connections Reloaded Search vendor "Ajaydsouza" for product "Connections Reloaded" | <= 3.1 Search vendor "Ajaydsouza" for product "Connections Reloaded" and version " <= 3.1" | wordpress |
Affected
| ||||||
| Archimidismertzanos Search vendor "Archimidismertzanos" | Atlast Business Search vendor "Archimidismertzanos" for product "Atlast Business" | <= 1.5.8.5 Search vendor "Archimidismertzanos" for product "Atlast Business" and version " <= 1.5.8.5" | wordpress |
Affected
| ||||||
| Archimidismertzanos Search vendor "Archimidismertzanos" | Fashionable Store Search vendor "Archimidismertzanos" for product "Fashionable Store" | <= 1.3.4 Search vendor "Archimidismertzanos" for product "Fashionable Store" and version " <= 1.3.4" | wordpress |
Affected
| ||||||
| Archimidismertzanos Search vendor "Archimidismertzanos" | Nothing Personal Search vendor "Archimidismertzanos" for product "Nothing Personal" | <= 1.0.7 Search vendor "Archimidismertzanos" for product "Nothing Personal" and version " <= 1.0.7" | wordpress |
Affected
| ||||||
| Arthousewebdesign Search vendor "Arthousewebdesign" | Brain Power Search vendor "Arthousewebdesign" for product "Brain Power" | <= 1.2 Search vendor "Arthousewebdesign" for product "Brain Power" and version " <= 1.2" | wordpress |
Affected
| ||||||
| Asmedia Search vendor "Asmedia" | Moseter Search vendor "Asmedia" for product "Moseter" | <= 1.3.1 Search vendor "Asmedia" for product "Moseter" and version " <= 1.3.1" | wordpress |
Affected
| ||||||
| Asmedia Search vendor "Asmedia" | Tuaug4 Search vendor "Asmedia" for product "Tuaug4" | <= 1.4 Search vendor "Asmedia" for product "Tuaug4" and version " <= 1.4" | wordpress |
Affected
| ||||||
| Ayecode Search vendor "Ayecode" | Cafe Bistro Search vendor "Ayecode" for product "Cafe Bistro" | < 1.1.4 Search vendor "Ayecode" for product "Cafe Bistro" and version " < 1.1.4" | wordpress |
Affected
| ||||||
| Ayecode Search vendor "Ayecode" | College Search vendor "Ayecode" for product "College" | < 1.5.1 Search vendor "Ayecode" for product "College" and version " < 1.5.1" | wordpress |
Affected
| ||||||
| Ayecode Search vendor "Ayecode" | Directory Search vendor "Ayecode" for product "Directory" | < 3.0.2 Search vendor "Ayecode" for product "Directory" and version " < 3.0.2" | wordpress |
Affected
| ||||||
| Ayecode Search vendor "Ayecode" | Plato Search vendor "Ayecode" for product "Plato" | < 1.1.9 Search vendor "Ayecode" for product "Plato" and version " < 1.1.9" | wordpress |
Affected
| ||||||
| Ayecode Search vendor "Ayecode" | Restaurant Pt Search vendor "Ayecode" for product "Restaurant Pt" | < 1.1.3 Search vendor "Ayecode" for product "Restaurant Pt" and version " < 1.1.3" | wordpress |
Affected
| ||||||
| Ayecode Search vendor "Ayecode" | Wedding Bride Search vendor "Ayecode" for product "Wedding Bride" | < 1.0.2 Search vendor "Ayecode" for product "Wedding Bride" and version " < 1.0.2" | wordpress |
Affected
| ||||||
| Climaxthemes Search vendor "Climaxthemes" | Kata Search vendor "Climaxthemes" for product "Kata" | < 1.2.9 Search vendor "Climaxthemes" for product "Kata" and version " < 1.2.9" | wordpress |
Affected
| ||||||
| Competethemes Search vendor "Competethemes" | Drop Search vendor "Competethemes" for product "Drop" | < 1.22 Search vendor "Competethemes" for product "Drop" and version " < 1.22" | wordpress |
Affected
| ||||||
| Davidgarlitz Search vendor "Davidgarlitz" | Viala Search vendor "Davidgarlitz" for product "Viala" | <= 1.3.1 Search vendor "Davidgarlitz" for product "Viala" and version " <= 1.3.1" | wordpress |
Affected
| ||||||
| Deothemes Search vendor "Deothemes" | Arendelle Search vendor "Deothemes" for product "Arendelle" | < 1.1.13 Search vendor "Deothemes" for product "Arendelle" and version " < 1.1.13" | wordpress |
Affected
| ||||||
| Deothemes Search vendor "Deothemes" | Everse Search vendor "Deothemes" for product "Everse" | < 1.2.4 Search vendor "Deothemes" for product "Everse" and version " < 1.2.4" | wordpress |
Affected
| ||||||
| Deothemes Search vendor "Deothemes" | Nokke Search vendor "Deothemes" for product "Nokke" | < 1.2.4 Search vendor "Deothemes" for product "Nokke" and version " < 1.2.4" | wordpress |
Affected
| ||||||
| Dotecsa Search vendor "Dotecsa" | Ilex Search vendor "Dotecsa" for product "Ilex" | < 1.4.2 Search vendor "Dotecsa" for product "Ilex" and version " < 1.4.2" | wordpress |
Affected
| ||||||
| Dotecsa Search vendor "Dotecsa" | Viburno Search vendor "Dotecsa" for product "Viburno" | < 1.3.2 Search vendor "Dotecsa" for product "Viburno" and version " < 1.3.2" | wordpress |
Affected
| ||||||
| Fredriksoerlie Search vendor "Fredriksoerlie" | Ultralight Search vendor "Fredriksoerlie" for product "Ultralight" | <= 1.2 Search vendor "Fredriksoerlie" for product "Ultralight" and version " <= 1.2" | wordpress |
Affected
| ||||||
| Fyrewurks Search vendor "Fyrewurks" | Polka Dots Search vendor "Fyrewurks" for product "Polka Dots" | <= 1.2 Search vendor "Fyrewurks" for product "Polka Dots" and version " <= 1.2" | wordpress |
Affected
| ||||||
| Fyrewurks Search vendor "Fyrewurks" | Tiki Time Search vendor "Fyrewurks" for product "Tiki Time" | <= 1.3 Search vendor "Fyrewurks" for product "Tiki Time" and version " <= 1.3" | wordpress |
Affected
| ||||||
| Henleythemes Search vendor "Henleythemes" | Counterpoint Search vendor "Henleythemes" for product "Counterpoint" | <= 1.8.1 Search vendor "Henleythemes" for product "Counterpoint" and version " <= 1.8.1" | wordpress |
Affected
| ||||||
| Iznyn Search vendor "Iznyn" | Opor Ayam Search vendor "Iznyn" for product "Opor Ayam" | <= 1.8 Search vendor "Iznyn" for product "Opor Ayam" and version " <= 1.8" | wordpress |
Affected
| ||||||
| Iznyn Search vendor "Iznyn" | Purity Of Soul Search vendor "Iznyn" for product "Purity Of Soul" | <= 1.9 Search vendor "Iznyn" for product "Purity Of Soul" and version " <= 1.9" | wordpress |
Affected
| ||||||
| Jinwen Search vendor "Jinwen" | Js O3 Lite Search vendor "Jinwen" for product "Js O3 Lite" | <= 1.5.8.2 Search vendor "Jinwen" for product "Js O3 Lite" and version " <= 1.5.8.2" | wordpress |
Affected
| ||||||
| Jinwen Search vendor "Jinwen" | Js Paper Search vendor "Jinwen" for product "Js Paper" | <= 2.5.7 Search vendor "Jinwen" for product "Js Paper" and version " <= 2.5.7" | wordpress |
Affected
| ||||||
| Marchettidesign Search vendor "Marchettidesign" | Fullbase Search vendor "Marchettidesign" for product "Fullbase" | < 1.2.1 Search vendor "Marchettidesign" for product "Fullbase" and version " < 1.2.1" | wordpress |
Affected
| ||||||
| Marchettidesign Search vendor "Marchettidesign" | Wlow Search vendor "Marchettidesign" for product "Wlow" | < 1.2.7 Search vendor "Marchettidesign" for product "Wlow" and version " < 1.2.7" | wordpress |
Affected
| ||||||
| Omarfolgheraiter Search vendor "Omarfolgheraiter" | Digitally Search vendor "Omarfolgheraiter" for product "Digitally" | <= 1.0.8 Search vendor "Omarfolgheraiter" for product "Digitally" and version " <= 1.0.8" | wordpress |
Affected
| ||||||
| Saumendra Search vendor "Saumendra" | Aapna Search vendor "Saumendra" for product "Aapna" | <= 1.3 Search vendor "Saumendra" for product "Aapna" and version " <= 1.3" | wordpress |
Affected
| ||||||
| Saumendra Search vendor "Saumendra" | Anand Search vendor "Saumendra" for product "Anand" | <= 1.2 Search vendor "Saumendra" for product "Anand" and version " <= 1.2" | wordpress |
Affected
| ||||||
| Ta2g Search vendor "Ta2g" | Tantyyellow Search vendor "Ta2g" for product "Tantyyellow" | <= 1.0.0.5 Search vendor "Ta2g" for product "Tantyyellow" and version " <= 1.0.0.5" | wordpress |
Affected
| ||||||
| Themeinprogress Search vendor "Themeinprogress" | Bazaar Lite Search vendor "Themeinprogress" for product "Bazaar Lite" | < 1.8.6 Search vendor "Themeinprogress" for product "Bazaar Lite" and version " < 1.8.6" | wordpress |
Affected
| ||||||
| Themeinprogress Search vendor "Themeinprogress" | Looki Lite Search vendor "Themeinprogress" for product "Looki Lite" | < 1.3.0 Search vendor "Themeinprogress" for product "Looki Lite" and version " < 1.3.0" | wordpress |
Affected
| ||||||
| Themeinprogress Search vendor "Themeinprogress" | Saul Search vendor "Themeinprogress" for product "Saul" | < 1.1.0 Search vendor "Themeinprogress" for product "Saul" and version " < 1.1.0" | wordpress |
Affected
| ||||||
| Themeinprogress Search vendor "Themeinprogress" | Saul Lite Search vendor "Themeinprogress" for product "Saul Lite" | < 1.4.6 Search vendor "Themeinprogress" for product "Saul Lite" and version " < 1.4.6" | wordpress |
Affected
| ||||||
| Themeinprogress Search vendor "Themeinprogress" | Venice Lite Search vendor "Themeinprogress" for product "Venice Lite" | <= 1.5.5 Search vendor "Themeinprogress" for product "Venice Lite" and version " <= 1.5.5" | wordpress |
Affected
| ||||||
| Thewebhunter Search vendor "Thewebhunter" | Anfaust Search vendor "Thewebhunter" for product "Anfaust" | <= 1.1 Search vendor "Thewebhunter" for product "Anfaust" and version " <= 1.1" | wordpress |
Affected
| ||||||
| Thewebhunter Search vendor "Thewebhunter" | Offset Writing Search vendor "Thewebhunter" for product "Offset Writing" | <= 1.2 Search vendor "Thewebhunter" for product "Offset Writing" and version " <= 1.2" | wordpress |
Affected
| ||||||
| Thriveweb Search vendor "Thriveweb" | Pinzolo Search vendor "Thriveweb" for product "Pinzolo" | < 1.2.10 Search vendor "Thriveweb" for product "Pinzolo" and version " < 1.2.10" | wordpress |
Affected
| ||||||
| Tijaji Search vendor "Tijaji" | Tijaji Search vendor "Tijaji" for product "Tijaji" | <= 1.43 Search vendor "Tijaji" for product "Tijaji" and version " <= 1.43" | wordpress |
Affected
| ||||||
| Wpmole Search vendor "Wpmole" | Tydskrif Search vendor "Wpmole" for product "Tydskrif" | <= 1.1.3 Search vendor "Wpmole" for product "Tydskrif" and version " <= 1.1.3" | wordpress |
Affected
| ||||||
| Yws Search vendor "Yws" | Bunnypress Lite Search vendor "Yws" for product "Bunnypress Lite" | <= 2.1 Search vendor "Yws" for product "Bunnypress Lite" and version " <= 2.1" | wordpress |
Affected
| ||||||