Themes Vulnerabilities

Your Journey theme <= 1.9.8 - Reflected Cross-Site Scripting via Prototype Pollution

Description

The plugin does not properly sanitize input and escape output, resulting in a vulnerability to Reflected Cross-Site Scripting via prototype pollution. This could lead to the injection of arbitrary web scripts in pages that execute when a user is tricked into performing an action like clicking a link.

Affects Themes

No known fix

References

Classification

Type
XSS
CWE

Miscellaneous

Original Researcher
longxi
Verified
No

Timeline

Publicly Published
2023-07-26 (about 2 years ago)
Added
2023-11-03 (about 2 years ago)
Last Updated
2023-11-03 (about 2 years ago)

Other