All of the above Aapna WordPress theme through 1.3, Anand WordPress theme through 1.2, Anfaust WordPress theme through 1.1, Arendelle WordPress theme before 1.1.13, Atlast Business WordPress theme through 1.5.8.5, Bazaar Lite WordPress theme before 1.8.6, Brain Power WordPress theme through 1.2, BunnyPressLite WordPress theme before 2.1, Cafe Bistro WordPress theme before 1.1.4, College WordPress theme before 1.5.1, Connections Reloaded WordPress theme through 3.1, Counterpoint WordPress theme through 1.8.1, Digitally WordPress theme through 1.0.8, Directory WordPress theme before 3.0.2, Drop WordPress theme before 1.22, Everse WordPress theme before 1.2.4, Fashionable Store WordPress theme through 1.3.4, Fullbase WordPress theme before 1.2.1, Ilex WordPress theme before 1.4.2, Js O3 Lite WordPress theme through 1.5.8.2, Js Paper WordPress theme through 2.5.7, Kata WordPress theme before 1.2.9, Kata App WordPress theme through 1.0.5, Kata Business WordPress theme through 1.0.2, Looki Lite WordPress theme before 1.3.0, moseter WordPress theme through 1.3.1, Nokke WordPress theme before 1.2.4, Nothing Personal WordPress theme through 1.0.7, Offset Writing WordPress theme through 1.2, Opor Ayam WordPress theme through 18, Pinzolo WordPress theme before 1.2.10, Plato WordPress theme before 1.1.9, Polka Dots WordPress theme through 1.2, Purity Of Soul WordPress theme through 1.9, Restaurant PT WordPress theme before 1.1.3, Saul WordPress theme before 1.1.0, Sean Lite WordPress theme before 1.4.6, Tantyyellow WordPress theme through 1.0.0.5, TIJAJI WordPress theme through 1.43, Tiki Time WordPress theme through 1.3, Tuaug4 WordPress theme through 1.4, Tydskrif WordPress theme through 1.1.3, UltraLight WordPress theme through 1.2, Venice Lite WordPress theme before 1.5.5, Viala WordPress theme through 1.3.1, viburno WordPress theme before 1.3.2, Wedding Bride WordPress theme before 1.0.2, Wlow WordPress theme before 1.2.7 suffer from the same issue about the search box reflecting the results causing XSS which allows an unauthenticated attacker to exploit against users if they click a malicious link.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Changed

Confidentiality Impact Low

Integrity Impact Low

Availability Impact None

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.02244.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Unknown Aapna affected
Version Status Constraints
0 affected ≤ 1.3
Unknown Anand affected
Version Status Constraints
0 affected ≤ 1.2
Unknown Anfaust affected
Version Status Constraints
0 affected ≤ 1.1
Unknown Arendelle unaffected
Version Status Constraints
0 affected < 1.1.13
Unknown Atlast Business affected
Version Status Constraints
0 affected ≤ 1.5.8.5
Unknown Bazaar Lite unaffected
Version Status Constraints
0 affected < 1.8.6
Unknown Brain Power affected
Version Status Constraints
0 affected ≤ 1.2
Unknown BunnyPressLite unaffected
Version Status Constraints
0 affected < 2.1
Unknown Cafe Bistro unaffected
Version Status Constraints
0 affected < 1.1.4
Unknown College unaffected
Version Status Constraints
0 affected < 1.5.1
Unknown Connections Reloaded affected
Version Status Constraints
0 affected ≤ 3.1
Unknown Counterpoint affected
Version Status Constraints
0 affected ≤ 1.8.1
Unknown Digitally affected
Version Status Constraints
0 affected ≤ 1.0.8
Unknown Directory unaffected
Version Status Constraints
0 affected < 3.0.2
Unknown Drop unaffected
Version Status Constraints
0 affected < 1.22
Unknown Everse unaffected
Version Status Constraints
0 affected < 1.2.4
Unknown Fashionable Store affected
Version Status Constraints
0 affected ≤ 1.3.4
Unknown Fullbase unaffected
Version Status Constraints
0 affected < 1.2.1
Unknown Ilex unaffected
Version Status Constraints
0 affected < 1.4.2
Unknown Js O3 Lite affected
Version Status Constraints
0 affected ≤ 1.5.8.2
Unknown Js Paper affected
Version Status Constraints
0 affected ≤ 2.5.7
Unknown Kata unaffected
Version Status Constraints
0 affected < 1.2.9
Unknown Kata App affected
Version Status Constraints
0 affected ≤ 1.0.5
Unknown Kata Business affected
Version Status Constraints
0 affected ≤ 1.0.2
Unknown Looki Lite unaffected
Version Status Constraints
0 affected < 1.3.0
Unknown moseter affected
Version Status Constraints
0 affected ≤ 1.3.1
Unknown Nokke unaffected
Version Status Constraints
0 affected < 1.2.4
Unknown Nothing Personal affected
Version Status Constraints
0 affected ≤ 1.0.7
Unknown Offset Writing affected
Version Status Constraints
0 affected ≤ 1.2
Unknown Opor Ayam affected
Version Status Constraints
0 affected ≤ 1.8
Unknown Pinzolo unaffected
Version Status Constraints
0 affected < 1.2.10
Unknown Plato unaffected
Version Status Constraints
0 affected < 1.1.9
Unknown Polka Dots affected
Version Status Constraints
0 affected ≤ 1.2
Unknown Purity Of Soul affected
Version Status Constraints
0 affected ≤ 1.9
Unknown Restaurant PT unaffected
Version Status Constraints
0 affected < 1.1.3
Unknown Saul unaffected
Version Status Constraints
0 affected < 1.1.0
Unknown Sean Lite unaffected
Version Status Constraints
0 affected < 1.4.6
Unknown Tantyyellow affected
Version Status Constraints
0 affected ≤ 1.0.0.5
Unknown TIJAJI affected
Version Status Constraints
0 affected ≤ 1.43
Unknown Tiki Time affected
Version Status Constraints
0 affected ≤ 1.3
Unknown Tuaug4 affected
Version Status Constraints
0 affected ≤ 1.4
Unknown Tydskrif affected
Version Status Constraints
0 affected ≤ 1.1.3
Unknown UltraLight affected
Version Status Constraints
0 affected ≤ 1.2
Unknown Venice Lite unaffected
Version Status Constraints
0 affected < 1.5.5
Unknown Viala affected
Version Status Constraints
0 affected ≤ 1.3.1
Unknown viburno unaffected
Version Status Constraints
0 affected < 1.3.2
Unknown Wedding Bride unaffected
Version Status Constraints
0 affected < 1.0.2
Unknown Wlow unaffected
Version Status Constraints
0 affected < 1.2.7

Configuration 1 [-]

OR cpe:2.3:a:ajaydsouza:connections_reloaded:*:*:*:*:*:wordpress:*:*
cpe:2.3:a:archimidismertzanos:atlast_business:*:*:*:*:*:wordpress:*:*
cpe:2.3:a:archimidismertzanos:fashionable_store:*:*:*:*:*:wordpress:*:*
cpe:2.3:a:archimidismertzanos:nothing_personal:*:*:*:*:*:wordpress:*:*
cpe:2.3:a:arthousewebdesign:brain_power:*:*:*:*:*:wordpress:*:*
cpe:2.3:a:asmedia:moseter:*:*:*:*:*:wordpress:*:*
cpe:2.3:a:asmedia:tuaug4:*:*:*:*:*:wordpress:*:*
cpe:2.3:a:ayecode:cafe_bistro:*:*:*:*:*:wordpress:*:*
cpe:2.3:a:ayecode:college:*:*:*:*:*:wordpress:*:*
cpe:2.3:a:ayecode:directory:*:*:*:*:*:wordpress:*:*
cpe:2.3:a:ayecode:plato:*:*:*:*:*:wordpress:*:*
cpe:2.3:a:ayecode:restaurant_pt:*:*:*:*:*:wordpress:*:*
cpe:2.3:a:ayecode:wedding_bride:*:*:*:*:*:wordpress:*:*
cpe:2.3:a:climaxthemes:kata:*:*:*:*:*:wordpress:*:*
cpe:2.3:a:competethemes:drop:*:*:*:*:*:wordpress:*:*
cpe:2.3:a:davidgarlitz:viala:*:*:*:*:*:wordpress:*:*
cpe:2.3:a:deothemes:arendelle:*:*:*:*:*:wordpress:*:*
cpe:2.3:a:deothemes:everse:*:*:*:*:*:wordpress:*:*
cpe:2.3:a:deothemes:nokke:*:*:*:*:*:wordpress:*:*
cpe:2.3:a:dotecsa:ilex:*:*:*:*:*:wordpress:*:*
cpe:2.3:a:dotecsa:viburno:*:*:*:*:*:wordpress:*:*
cpe:2.3:a:fredriksoerlie:ultralight:*:*:*:*:*:wordpress:*:*
cpe:2.3:a:fyrewurks:polka_dots:*:*:*:*:*:wordpress:*:*
cpe:2.3:a:fyrewurks:tiki_time:*:*:*:*:*:wordpress:*:*
cpe:2.3:a:henleythemes:counterpoint:*:*:*:*:*:wordpress:*:*
cpe:2.3:a:iznyn:opor_ayam:*:*:*:*:*:wordpress:*:*
cpe:2.3:a:iznyn:purity_of_soul:*:*:*:*:*:wordpress:*:*
cpe:2.3:a:jinwen:js_o3_lite:*:*:*:*:*:wordpress:*:*
cpe:2.3:a:jinwen:js_paper:*:*:*:*:*:wordpress:*:*
cpe:2.3:a:marchettidesign:fullbase:*:*:*:*:*:wordpress:*:*
cpe:2.3:a:marchettidesign:wlow:*:*:*:*:*:wordpress:*:*
cpe:2.3:a:omarfolgheraiter:digitally:*:*:*:*:*:wordpress:*:*
cpe:2.3:a:saumendra:aapna:*:*:*:*:*:wordpress:*:*
cpe:2.3:a:saumendra:anand:*:*:*:*:*:wordpress:*:*
cpe:2.3:a:ta2g:tantyyellow:*:*:*:*:*:wordpress:*:*
cpe:2.3:a:themeinprogress:bazaar_lite:*:*:*:*:*:wordpress:*:*
cpe:2.3:a:themeinprogress:looki_lite:*:*:*:*:*:wordpress:*:*
cpe:2.3:a:themeinprogress:saul:*:*:*:*:*:wordpress:*:*
cpe:2.3:a:themeinprogress:saul_lite:*:*:*:*:*:wordpress:*:*
cpe:2.3:a:themeinprogress:venice_lite:*:*:*:*:*:wordpress:*:*
cpe:2.3:a:thewebhunter:anfaust:*:*:*:*:*:wordpress:*:*
cpe:2.3:a:thewebhunter:offset_writing:*:*:*:*:*:wordpress:*:*
cpe:2.3:a:thriveweb:pinzolo:*:*:*:*:*:wordpress:*:*
cpe:2.3:a:tijaji:tijaji:*:*:*:*:*:wordpress:*:*
cpe:2.3:a:wpmole:tydskrif:*:*:*:*:*:wordpress:*:*
cpe:2.3:a:yws:bunnypress_lite:*:*:*:*:*:wordpress:*:*

No data.

No data.

Project Subscriptions

Vendors Products
Ajaydsouza Subscribe
Connections Reloaded Subscribe
Archimidismertzanos Subscribe
Atlast Business Subscribe
Fashionable Store Subscribe
Nothing Personal Subscribe
Arthousewebdesign Subscribe
Brain Power Subscribe
Asmedia Subscribe
Moseter Subscribe
Tuaug4 Subscribe
Ayecode Subscribe
Cafe Bistro Subscribe
College Subscribe
Directory Subscribe
Plato Subscribe
Restaurant Pt Subscribe
Wedding Bride Subscribe
Climaxthemes Subscribe
Kata Subscribe
Competethemes Subscribe
Drop Subscribe
Davidgarlitz Subscribe
Viala Subscribe
Deothemes Subscribe
Arendelle Subscribe
Everse Subscribe
Nokke Subscribe
Dotecsa Subscribe
Ilex Subscribe
Viburno Subscribe
Fredriksoerlie Subscribe
Ultralight Subscribe
Fyrewurks Subscribe
Polka Dots Subscribe
Tiki Time Subscribe
Henleythemes Subscribe
Counterpoint Subscribe
Iznyn Subscribe
Opor Ayam Subscribe
Purity Of Soul Subscribe
Jinwen Subscribe
Js O3 Lite Subscribe
Js Paper Subscribe
Marchettidesign Subscribe
Fullbase Subscribe
Wlow Subscribe
Omarfolgheraiter Subscribe
Digitally Subscribe
Saumendra Subscribe
Aapna Subscribe
Anand Subscribe
Ta2g Subscribe
Tantyyellow Subscribe
Themeinprogress Subscribe
Bazaar Lite Subscribe
Looki Lite Subscribe
Saul Subscribe
Saul Lite Subscribe
Venice Lite Subscribe
Thewebhunter Subscribe
Anfaust Subscribe
Offset Writing Subscribe
Thriveweb Subscribe
Pinzolo Subscribe
Tijaji Subscribe
Tijaji Subscribe
Wpmole Subscribe
Tydskrif Subscribe
Yws Subscribe
Bunnypress Lite Subscribe
Advisories
Source ID Title
EUVD EUVD EUVD-2023-34266 All of the above Aapna WordPress theme through 1.3, Anand WordPress theme through 1.2, Anfaust WordPress theme through 1.1, Arendelle WordPress theme before 1.1.13, Atlast Business WordPress theme through 1.5.8.5, Bazaar Lite WordPress theme before 1.8.6, Brain Power WordPress theme through 1.2, BunnyPressLite WordPress theme before 2.1, Cafe Bistro WordPress theme before 1.1.4, College WordPress theme before 1.5.1, Connections Reloaded WordPress theme through 3.1, Counterpoint WordPress theme through 1.8.1, Digitally WordPress theme through 1.0.8, Directory WordPress theme before 3.0.2, Drop WordPress theme before 1.22, Everse WordPress theme before 1.2.4, Fashionable Store WordPress theme through 1.3.4, Fullbase WordPress theme before 1.2.1, Ilex WordPress theme before 1.4.2, Js O3 Lite WordPress theme through 1.5.8.2, Js Paper WordPress theme through 2.5.7, Kata WordPress theme before 1.2.9, Kata App WordPress theme through 1.0.5, Kata Business WordPress theme through 1.0.2, Looki Lite WordPress theme before 1.3.0, moseter WordPress theme through 1.3.1, Nokke WordPress theme before 1.2.4, Nothing Personal WordPress theme through 1.0.7, Offset Writing WordPress theme through 1.2, Opor Ayam WordPress theme through 18, Pinzolo WordPress theme before 1.2.10, Plato WordPress theme before 1.1.9, Polka Dots WordPress theme through 1.2, Purity Of Soul WordPress theme through 1.9, Restaurant PT WordPress theme before 1.1.3, Saul WordPress theme before 1.1.0, Sean Lite WordPress theme before 1.4.6, Tantyyellow WordPress theme through 1.0.0.5, TIJAJI WordPress theme through 1.43, Tiki Time WordPress theme through 1.3, Tuaug4 WordPress theme through 1.4, Tydskrif WordPress theme through 1.1.3, UltraLight WordPress theme through 1.2, Venice Lite WordPress theme before 1.5.5, Viala WordPress theme through 1.3.1, viburno WordPress theme before 1.3.2, Wedding Bride WordPress theme before 1.0.2, Wlow WordPress theme before 1.2.7 suffer from the same issue about the search box reflecting the results causing XSS which allows an unauthenticated attacker to exploit against users if they click a malicious link.
Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://wpscan.com/vulnerability/f434afd3-7de4-4bf4-a9bb-9f9aeaae1dc5 cve-icon cve-icon
History

No history.

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: WPScan

Published:

Updated: 2024-08-02T06:33:05.593Z

Reserved: 2023-05-19T14:02:35.923Z

Link: CVE-2023-2813

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2023-09-04T12:15:08.997

Modified: 2024-11-21T07:59:20.313

Link: CVE-2023-2813

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses

No weakness.