Themes Vulnerabilities
Your Journey theme <= 1.9.8 - Reflected Cross-Site Scripting via Prototype Pollution
Description
The plugin does not properly sanitize input and escape output, resulting in a vulnerability to Reflected Cross-Site Scripting via prototype pollution. This could lead to the injection of arbitrary web scripts in pages that execute when a user is tricked into performing an action like clicking a link.
Affects Themes
References
Classification
Type
XSS
OWASP top 10
CWE
CVSS
Miscellaneous
Original Researcher
longxi
Verified
No
WPVDB ID
Timeline
Publicly Published
2023-07-26 (about 2 years ago)
Added
2023-11-03 (about 2 years ago)
Last Updated
2023-11-03 (about 2 years ago)