CVE-2023-2813

Vulnerability Summary

All of the above Aapna WordPress theme up to and including 1.3, Anand WordPress theme up to and including 1.2, Anfaust WordPress theme up to and including 1.1, Arendelle WordPress theme prior to 1.1.13, Atlast Business WordPress theme up to and including 1.5.8.5, Bazaar Lite WordPress theme prior to 1.8.6, Brain Power WordPress theme up to and including 1.2, BunnyPressLite WordPress theme prior to 2.1, Cafe Bistro WordPress theme prior to 1.1.4, College WordPress theme prior to 1.5.1, Connections Reloaded WordPress theme up to and including 3.1, Counterpoint WordPress theme up to and including 1.8.1, Digitally WordPress theme up to and including 1.0.8, Directory WordPress theme prior to 3.0.2, Drop WordPress theme prior to 1.22, Everse WordPress theme prior to 1.2.4, Fashionable Store WordPress theme up to and including 1.3.4, Fullbase WordPress theme prior to 1.2.1, Ilex WordPress theme prior to 1.4.2, Js O3 Lite WordPress theme up to and including 1.5.8.2, Js Paper WordPress theme up to and including 2.5.7, Kata WordPress theme prior to 1.2.9, Kata App WordPress theme up to and including 1.0.5, Kata Business WordPress theme up to and including 1.0.2, Looki Lite WordPress theme prior to 1.3.0, moseter WordPress theme up to and including 1.3.1, Nokke WordPress theme prior to 1.2.4, Nothing Personal WordPress theme up to and including 1.0.7, Offset Writing WordPress theme up to and including 1.2, Opor Ayam WordPress theme through 18, Pinzolo WordPress theme prior to 1.2.10, Plato WordPress theme prior to 1.1.9, Polka Dots WordPress theme up to and including 1.2, Purity Of Soul WordPress theme up to and including 1.9, Restaurant PT WordPress theme prior to 1.1.3, Saul WordPress theme prior to 1.1.0, Sean Lite WordPress theme prior to 1.4.6, Tantyyellow WordPress theme up to and including 1.0.0.5, TIJAJI WordPress theme up to and including 1.43, Tiki Time WordPress theme up to and including 1.3, Tuaug4 WordPress theme up to and including 1.4, Tydskrif WordPress theme up to and including 1.1.3, UltraLight WordPress theme up to and including 1.2, Venice Lite WordPress theme prior to 1.5.5, Viala WordPress theme up to and including 1.3.1, viburno WordPress theme prior to 1.3.2, Wedding Bride WordPress theme prior to 1.0.2, Wlow WordPress theme prior to 1.2.7 suffer from the same issue about the search box reflecting the results causing XSS which allows an unauthenticated malicious user to exploit against users if they click a malicious link.

References