Cththemes

4 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-36502 Jul 25, 14:15 MEDIUM This Month

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cththemes Balkon plugin <= 1.3.2 versions. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Balkon Cththemes

NVD

CVSS 3.1

6.1

EPSS

0.4%

CVE-2023-29430 Jun 26, 10:15 MEDIUM This Month

Unauth. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Theroof Cththemes

NVD

CVSS 3.1

6.1

EPSS

0.4%

CVE-2023-29236 Apr 07, 12:15 MEDIUM This Month

Unauth. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Outdoor Cththemes

NVD

CVSS 3.1

6.1

EPSS

0.4%

CVE-2023-25041 Apr 07, 12:15 MEDIUM This Month

Unauth. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Monolit Cththemes

NVD

CVSS 3.1

6.1

EPSS

0.4%

CVE-2023-36502

EPSS 0% CVSS 6.1

MEDIUM This Month

XSS Balkon Cththemes

NVD

CVE-2023-29430

EPSS 0% CVSS 6.1

MEDIUM This Month

Unauth. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Theroof Cththemes

NVD

CVE-2023-29236

EPSS 0% CVSS 6.1

MEDIUM This Month

Unauth. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Outdoor Cththemes

NVD

CVE-2023-25041

EPSS 0% CVSS 6.1

MEDIUM This Month

Unauth. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Monolit Cththemes

NVD