Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 16/04/2024 Updated: 16/04/2024

The archive-tainacan-collection theme for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in version 2.7.2. This makes it possible for unauthenticated malicious users to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.

Exploiting Reflected Cross-Site Scripting (XSS) in WordPress archive-tainacan-collection Theme

😈 Exploiting Reflected Cross-Site Scripting (XSS) in WordPress archive-tainacan-collection Theme 😈 Description: This exploit leverages a vulnerability found in version 271 of the WordPress archive-tainacan-collection theme (CVE-2024-3867) By utilizing the unescaped add_query_arg method for URLs, unauthorized attackers can inject arbitrary web scripts By enticing a use

https://www.wordfence.com/threat-intel/vulnerabilities/id/3ffd63ca-5ea4-451c-aa97-092a754ca79f?source=cve https://themes.trac.wordpress.org/changeset/224400/tainacan-interface/2.7.2/archive-tainacan-collection.php https://nvd.nist.gov https://github.com/RansomGroupCVE/CVE-2024-3867-POC

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2024-3867

Vulnerability Summary

Github Repositories

References

Vulmon Search

About

Products

Connect