Vulnerabilities > Unitedthemes

DATE CVE VULNERABILITY TITLE RISK
2024-07-22 CVE-2024-37097 Cross-site Scripting vulnerability in Unitedthemes Shortcodes
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in UnitedThemes Shortcodes by United Themes allows Reflected XSS.This issue affects Shortcodes by United Themes: from n/a before 5.0.5.
network
low complexity
unitedthemes CWE-79
6.1
2024-02-12 CVE-2024-24927 Cross-site Scripting vulnerability in Unitedthemes Brooklyn
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in UnitedThemes Brooklyn | Creative Multi-Purpose Responsive WordPress Theme allows Reflected XSS.This issue affects Brooklyn | Creative Multi-Purpose Responsive WordPress Theme: from n/a through 4.9.7.6.
network
low complexity
unitedthemes CWE-79
6.1