Themes Vulnerabilities

Photocrati Theme 4.7.3 - Reflected Cross-Site Scripting (XSS)

Description

The photocrati-theme WordPress theme was affected by a Reflected Cross-Site Scripting (XSS) security vulnerability.

Affects Themes

photocrati-theme
No known fix

References

CVE
CVE-2014-100016
URL
https://packetstormsecurity.com/files/#124986/

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
43cc72ee-87c3-4089-a34d-380f1395cdfc

Timeline

Publicly Published
2014-01-29 (about 12 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2025-02-23
Title
Contact Form Plugin < 1.1.27 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2025-11-10
Title
Simple Donate <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2024-07-09
Title
Timeline Module for Beaver Builder < 1.1.4 - Editor+ Stored XSS
Published
2024-02-01
Title
SlimStat Analytics < 5.1.4 - Subscriber+ Stored XSS
Published
2025-12-11
Title
WP Flot <= 0.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes