Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Vendor: Theme Freesia Clear all filters
TI-2024-23632 CVE-2024-35763 · GHSA-r46w-cf8c-5v8w

WordPress Excellent theme <= 1.2.9 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Theme Freesia Excellent allows Stored XSS.This issue affects Excellent: from n/a through 1.2.9.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00254 Published 2024-06-21 No fix listed CWE-79
TI-2024-23580 CVE-2024-35711 · GHSA-x25g-vpwv-2vwj

WordPress Event theme <= 1.2.2 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Theme Freesia Event allows Stored XSS.This issue affects Event: from n/a through 1.2.2.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0027 Published 2024-06-08 No fix listed CWE-79
TI-2024-23583 CVE-2024-35714 · GHSA-h4w7-5494-76c5

WordPress Idyllic theme <= 1.1.8 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Theme Freesia Idyllic allows Stored XSS.This issue affects Idyllic: from n/a through 1.1.8.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00254 Published 2024-06-08 No fix listed CWE-79
TI-2024-23609 CVE-2024-35740 · GHSA-22vq-ccfv-9q3x

WordPress Pixgraphy theme <= 1.3.8 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Theme Freesia Pixgraphy allows Stored XSS.This issue affects Pixgraphy: from n/a through 1.3.8.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00254 Published 2024-06-08 No fix listed CWE-79
TI-2024-22716 CVE-2024-34376 · GHSA-qqr5-9q23-995q

WordPress Edge theme <= 2.0.9 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Theme Freesia Edge allows Stored XSS.This issue affects Edge: from n/a through 2.0.9.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00331 Published 2024-05-06 No fix listed CWE-79
TI-2024-22425 CVE-2024-33955 · GHSA-wxj3-qj8p-4936

WordPress Freesia Empire theme <= 1.4.1 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Theme Freesia Freesia Empire allows Stored XSS.This issue affects Freesia Empire: from n/a through 1.4.1.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00399 Published 2024-05-02 No fix listed CWE-79