Untriaged
Permalink
CVE-2024-54348
6.5 MEDIUM
- CVSS version: 3.1
- Attack vector (AV): NETWORK
- Attack complexity (AC): LOW
- Privileges required (PR): LOW
- User interaction (UI): REQUIRED
- Scope (S): CHANGED
- Confidentiality impact (C): LOW
- Integrity impact (I): LOW
- Availability impact (A): LOW
WordPress Brandy theme <= 1.1.6 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YayCommerce Brand allows Stored XSS.This issue affects Brand: from n/a through 1.1.6.
References
Affected products
brand
- =<1.1.6
Matching in nixpkgs
pkgs.matrix-brandy
Matrix Brandy BASIC VI for Linux, Windows, MacOSX
-
nixos-unstable -
- nixpkgs-unstable 1.23.5
pkgs.librandombytes
Simple API for applications generating fresh randomness
-
nixos-unstable -
- nixpkgs-unstable 20240318
Package maintainers
-
@jleightcap Jack Leightcap <jack@leightcap.com>
-
@imadnyc Abdullah Imad <me@imad.nyc>
-
@kiike Enric Morales <me@enric.me>
-
@fiq Raf Gemmail <raf+git@dreamthought.com>
-
@cherrypiejam Gongqi Huang