The Fruitful Theme for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters stored via the fruitful_theme_options_action AJAX action in versions up to, and including, 3.8.1 due to insufficient in…
CVSS 3.1MEDIUM 6.4·Network·Low privileges·No interaction·EPSS 0.005·Published 2023-06-07·Fixed in 3.8.2CWE-79