Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in Allure Real Estate Theme for Placester 0.1.1

  • Severity: medium-risk
  • Status: Open
  • Publication: February 19, 2013

The Allure Real Estate Theme for Placester theme for WordPress is vulnerable to a security issue called Cross-Site Scripting. This issue exists in versions of the theme up to 0.1.1 and can be exploited by unauthenticated attackers. It allows them to inject malicious code into the website that can be run in the browsers of visitors. This is caused by the theme not properly filtering and escaping user input.

Detected in:

Allure Real Estate Theme for Placester open vulnerable versions: >= * <= 0.1.1

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.