PT-2021-16222
CVE-2021-24719
·
تاريخ النشر
2021-10-11
·
تاريخ التحديث
2021-11-30
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Enfold versions prior to 4.8.4
Description
The Enfold WordPress theme is affected by a Reflected Cross-Site Scripting (XSS) issue. This issue is present in Enfold versions that use Avia Page Builder and are previous to version 4.8.4.
Recommendations
For Enfold versions prior to 4.8.4, update to version 4.8.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the Avia Page Builder until the update is applied.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾