Vulnerabilities

TI-2024-24782 CVE-2024-37267 · GHSA-c9x8-gmc6-wjqj

WordPress Striking theme <= 2.3.4 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in kaptinlin Striking allows Reflected XSS.This issue affects Striking: from n/a through 2.3.4.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00272 Published 2024-07-22 No fix listed CWE-79

TI-2024-24783 CVE-2024-37268 · GHSA-w54w-cwh9-m6xv

WordPress Striking theme <= 2.3.4 - Local File Inclusion vulnerability

MEDIUM 41

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in kaptinlin Striking allows Path Traversal.This issue affects Striking: from n/a through 2.3.4.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00531 Published 2024-07-09 No fix listed CWE-22

Vulnerabilities

Filters

WordPress Striking theme <= 2.3.4 - Reflected Cross Site Scripting (XSS) vulnerability

WordPress Striking theme <= 2.3.4 - Local File Inclusion vulnerability