Input validation vulnerability in Houzez 4.1.1

The Houzez theme for WordPress has a security issue called Reflected Cross-Site Scripting. This problem affects all versions up to and including 4.1.1. It occurs because the theme does not properly clean up and protect the input and output of information. As a result, attackers who are not logged in can insert harmful web scripts into pages. This can happen if they manage to deceive a user into clicking on a link.

Detected in:

Houzez open vulnerable versions: >= * <= 4.1.1

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.