Read the docs

Childtheme-generator

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Childtheme-generator records in CISA KEV

No Childtheme-generator vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Child Theme Generator 1 record LOW

Records

1 record

TI-2021-07261 CVE-2021-24982 · GHSA-v9hx-6rmh-g3mr

Child Theme Generator <= 2.2.7 - Reflected Cross-Site Scripting

Priority LOW 29

The Child Theme Generator WordPress plugin through 2.2.7 does not sanitise escape the parade parameter before outputting it back, leading to a Reflected Cross-Site Scripting in the admin dashboard

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00646 Published 2022-03-14 No fix listed CWE-79
Open these records in search →