WordPress Theme Zoner Real Estate 4.1.1 contains a persistent cross-site scripting vulnerability that allows authenticated agents to inject malicious scripts through the Address input field when creating properties.
The Fruitful Theme for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters stored via the fruitful_theme_options_action AJAX action in versions up to, and including, 3.8.1 due to insufficient in…
CVSS 3.1MEDIUM 6.4·Network·Low privileges·No interaction·EPSS 0.005·Published 2023-06-07·Fixed in 3.8.2CWE-79