The7

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-32123 Nov 13, 18:15 MEDIUM This Month

Cross-Site Request Forgery (CSRF) vulnerability in Dream-Theme The7 allows Stored XSS.7.3. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS CSRF The7 Dream Theme

NVD

CVSS 3.1

6.1

EPSS

0.1%

CVE-2023-29100 Jun 23, 13:15 MEDIUM This Month

Unauth. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS The7 Dream Theme

NVD

CVSS 3.1

6.1

EPSS

0.4%

CVE-2023-32123

EPSS 0% CVSS 6.1

MEDIUM This Month

Cross-Site Request Forgery (CSRF) vulnerability in Dream-Theme The7 allows Stored XSS.7.3. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS CSRF The7 +1

NVD

CVE-2023-29100

EPSS 0% CVSS 6.1

MEDIUM This Month

Unauth. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS The7 Dream Theme

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy