CVE Database /
CVE-2024-43276
CVE · Medium
CVE-2024-43276 — Child Theme Creator by Orbisius [orbisius-child-theme-creator] < 1.5.5
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2024-43276
|
Child Theme Creator by Orbisius [orbisius-child-theme-creator] < 1.5.5 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Medium
6.1
|
< 1.5.5
|
1.5.5 |
2024-08-16 |
—
|
CVE-2024-43276
The Child Theme Creator by Orbisius plugin versions up to 1.5.4 contains a reflected cross-site scripting vulnerability that stems from inadequate sanitization of inputs and escaping of outputs. Attackers without authentication can inject malicious scripts into web pages that will run when users are tricked into clicking a crafted link. The vulnerability was fixed in version 1.5.5.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings