LeoTheme

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

LeoTheme records in CISA KEV

No LeoTheme vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Leoblog · all components

TI-2023-20709 CVE-2023-39639 · GHSA-85h5-2vpm-q2g3

HIGH 82

LeoTheme leoblog up to v3.1.2 was discovered to contain a SQL injection vulnerability via the component LeoBlogBlog::getListBlogs.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00807 Published 2023-09-14 No fix listed CWE-89