PT-2023-29906 · G5Theme · G5Theme Grid Plus

Le Ngoc Anh

·

CVE-2023-46209

·

Published

2023-10-27

·

Updated

2023-10-31

CVSS v3.1

7.1

High

VectorAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions G5Theme Grid Plus – Unlimited grid plugin versions <= 1.3.2
Description The issue is related to an Unauth. Reflected Cross-Site Scripting (XSS) vulnerability. This type of vulnerability allows an attacker to inject malicious scripts into a website, potentially leading to unauthorized actions on behalf of the user.
Recommendations For G5Theme Grid Plus – Unlimited grid plugin versions <= 1.3.2, update to a version higher than 1.3.2 to resolve the issue.

Fix

XSS

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2023-46209

Affected Products

G5Theme Grid Plus