CVE-2023-41237: WordPress Arya Multipurpose Pro Theme <= 1.0.8 is vulnerable to Cross Site Scripting (XSS)
Published Sep 27, 2023
·Updated
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Everest Themes Arya Multipurpose Pro theme <= 1.0.8 versions.
Affected Software
1 affected component
everestthemes Arya Multipurpose Theme Wordpress<=1.0.8
Event History
Sep 27, 2023
CVE Published
via MITRE·11:53 AM
Data Sourced
via MITRE·11:53 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2023-41237.
2
What is the severity of CVE-2023-41237?
The severity of CVE-2023-41237 is high (6.1).
3
What is the affected software?
The affected software is Everest Themes Arya Multipurpose Pro theme version <= 1.0.8.
4
What is the common weakness enumeration (CWE) ID for this vulnerability?
The common weakness enumeration (CWE) ID for this vulnerability is CWE-79.
5
How can I fix the CVE-2023-41237 vulnerability?
To fix the CVE-2023-41237 vulnerability, it is recommended to update to a version newer than 1.0.8 of Everest Themes Arya Multipurpose Pro theme.