Themes Vulnerabilities

Codilight Premium 1.0.0 - admin/front-end/options.php reset Parameter XSS

Description

The codilight WordPress theme was affected by an admin/front-end/options.php reset Parameter XSS security vulnerability.

Affects Themes

codilight
No known fix

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
aa23d852-4294-4519-beb3-fe2cdff99689

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2015-05-15 (about 10 years ago)

Other

Published
Title
Published
2024-10-24
Title
Interactive World Map < 3.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2025-06-30
Title
Ultra Addons for Contact Form 7 < 3.5.22 - Authenticated (Contributor+) Stored Cross-Site Scripting via UACF7_CUSTOM_FIELDS Shortcode
Published
2023-01-20
Title
Heateor Social Comments < 1.6.2 - Contributor+ Stored XSS
Published
2024-02-12
Title
Maspik – Spam blacklist < 0.10.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
Published
2024-08-07
Title
Xpro Elementor Addons < 1.4.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting