stellarwp Virtue vulnerabilities (CVE)

CVE records published for stellarwp Virtue, newest first. Follow to get an email when a new one appears.

1 results

6.4Medium

CVE-2024-4034 2 years ago

Virtue <= 3.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Author

stellarwp Virtue

The Virtue theme for WordPress is vulnerable to Stored Cross-Site Scripting via a Post Author's name in all versions up to, and including, 3.4.8 due to insufficient input sanitization and output escaping when the latest posts feature is enabled on the homepag…