Gameplan Event And Gym Fitness
1 CVEs
product
Monthly
Reflected XSS is possible in the GamePlan theme through 1.5.13.2 for WordPress because of insufficient input sanitization, as demonstrated by the s parameter. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
WordPress
XSS
Gameplan Event And Gym Fitness
NVD
CVSS 3.0
6.1
EPSS
1.1%
EPSS 1%
CVSS 6.1
MEDIUM
POC
This Month
Reflected XSS is possible in the GamePlan theme through 1.5.13.2 for WordPress because of insufficient input sanitization, as demonstrated by the s parameter. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
WordPress
XSS
Gameplan Event And Gym Fitness
NVD