Kallyas
Monthly
Reflected cross-site scripting in the Hogash KALLYAS WordPress theme through version 4.25.0 allows remote attackers to execute script in a victim’s browser when the victim follows a crafted URL. The attacker does not need authentication but must induce user interaction, and the payload is reflected per request rather than persisted server-side; the vulnerable parameter is not identified in the available sources. No public exploit identified at time of analysis, and the supplied priority label places this in the this_week queue.
Reflected cross-site scripting in the Hogash KALLYAS WordPress theme through version 4.25.0 allows remote attackers to execute script in a victim’s browser when the victim follows a crafted URL. The attacker does not need authentication but must induce user interaction, and the payload is reflected per request rather than persisted server-side; the vulnerable parameter is not identified in the available sources. No public exploit identified at time of analysis, and the supplied priority label places this in the this_week queue.