CVE-2024-9775

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') (CWE-79)

Published: Nov 9, 2024 / Updated: 11d ago

The Anih - Creative Agency WordPress Theme theme for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2024 due to an incomplete...

Shtheme - MEDIUM - CVE-2024-9775 The Anih - Creative Agency WordPress Theme theme for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2024 due to an incomplete blacklist, insufficient input sanitization, and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.

CVE ID : CVE-2024-9775 Published : Nov. 9, 2024, 3:15 a.m. 52 minutes ago Description : The Anih - Creative Agency WordPress Theme theme for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2024 due to an incomplete blacklist, insufficient input sanitization, and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. Severity:

The Anih - Creative Agency WordPress Theme theme for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2024 due to an incomplete blacklist, insufficient input sanitization, and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.

Content warning: SHTHEME ANIH - CREATIVE AGENCY WORDPRESS THEME CVE-2024-9775 CVE-2024-9775 Anih - Creative Agency WordPress Theme https://www. cve.org/CVERecord?id=CVE-2024- 9775 https://www. wordfence.com/threat-intel/vul nerabilities/id/8b2b6a6b-73c2-441e-893d-ec171a659546?source=cve https:// themeforest.net/item/anih-crea tive-agency-wordpress-theme/36381357 # shtheme # Anih -CreativeAgencyWordPressTheme # CVE_2024_9775 # bot