Known CVE

WordPress 15Zine <3.3.0 - Cross-Site Scripting

WordPress 15Zine before 3.3.0 is vulnerable to reflected cross-site scripting because the theme does not sanitize the cbi parameter before including it in the HTTP response via the cb_s_a AJAX action.

CVE-2020-36510

Medium2020CVSS 6.1CWE-79

cve2020 · xss · wordpress · wp-theme · wp · wpscan · codetipi · vuln

Verified scans run this check after you prove you own the site.

All known CVEs View the checks catalog National Vulnerability Database

Scan a website