Avada Theme <= 5.1.4 - Stored Cross-Site Scripting (XSS) & CSRF

The Avada WordPress theme was affected by a Stored Cross-Site Scripting (XSS) & CSRF  security vulnerability.

Proof of Concept

http://cdn.wphutte.com/Avada/5.1.4/xss.html
http://cdn.wphutte.com/Avada/5.1.4/csrf.html

Fixed in version 5.1.5✓

CVE

CVE

URL

URL

URL

Type

XSS

OWASP top 10

CWE

Submitter

WpHutte

Submitter website

Submitter twitter

Verified

WPVDB ID

Publicly Published

2017-04-26 (about 4 years ago)

Added

2017-05-02 (about 4 years ago)

Last Updated

2020-09-22 (about 1 years ago)