Vulnerabilities > Kriesi > Enfold > 4.7.5

DATE CVE VULNERABILITY TITLE RISK
2023-11-30 CVE-2023-38400 Cross-site Scripting vulnerability in Kriesi Enfold
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kriesi Enfold - Responsive Multi-Purpose Theme allows Reflected XSS.This issue affects Enfold - Responsive Multi-Purpose Theme: from n/a through 5.6.4.
network
low complexity
kriesi CWE-79
6.1
2021-10-11 CVE-2021-24719 Cross-site Scripting vulnerability in Kriesi Enfold
The Enfold Enfold WordPress theme before 4.8.4 was vulnerable to Reflected Cross-Site Scripting (XSS).
network
kriesi CWE-79
4.3