CVE-2023-7194

Name of the Vulnerable Software and Affected Versions Meris WordPress theme versions 1.1.2 and earlier

Description The issue is related to Reflected Cross-Site Scripting, which occurs because the theme does not properly sanitise and escape certain parameters before outputting them back in the page. This could be exploited against high-privilege users, such as administrators.

Recommendations For Meris WordPress theme versions 1.1.2 and earlier, consider updating to a newer version that addresses the sanitisation and escaping of parameters to prevent Reflected Cross-Site Scripting. As a temporary workaround, restrict access to sensitive pages and parameters to minimize the risk of exploitation.