medium5.4
CVE-2022-4114
The Superio WordPress theme does not sanitise and escape some parameters, which could allow users with a role as low as a subscriber to perform Cross-Site Scri…
Impact
The Superio WordPress theme does not sanitise and escape some parameters, which could allow users with a role as low as a subscriber to perform Cross-Site Scripting attacks.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apusthemes | Superio | before 1.2.33 |
References
- NVD record
- CVE.org record
- https://themeforest.net/item/superio-job-board-wordpress-theme/32180231
- https://wpscan.com/vulnerability/7569f4ac-05c9-43c9-95e0-5cc360524bbd
- https://themeforest.net/item/superio-job-board-wordpress-theme/32180231
- https://wpscan.com/vulnerability/7569f4ac-05c9-43c9-95e0-5cc360524bbd