everestthemes

Records18All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high12CVSS 7.0–8.9

Exploited now

everestthemes records in CISA KEV

No everestthemes vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Everest Backup 4 records MEDIUM Everest News 2 records LOW Arya Multipurpose 1 record LOW Arya Multipurpose Theme 1 record LOW Gucherry Blog 1 record LOW Mocho Blog 1 record LOW Viable Blog 1 record LOW

Records

1 record in Gucherry Blog · all components

TI-2024-21418 CVE-2024-32531 · GHSA-5hc7-7xcm-fv36

WordPress GuCherry Blog theme <= 1.1.8 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Everest themes GuCherry Blog allows Reflected XSS.This issue affects GuCherry Blog: from n/a through 1.1.8.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00354 Published 2024-04-17 No fix listed CWE-79

Open these records in search →

Critical	1
High	12
Medium	5
Low	0
No CVSS	0