Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
WordPress Theme OneTone: Unauthenticated Stored Cross-Site Scripting (XSS) - Vulnerability Database

WordPress Theme OneTone: Unauthenticated Stored Cross-Site Scripting (XSS)

Description

WordPress Theme OneTone is prone to an unauthenticated Stored Cross-Site Scripting vulnerability in version 3.0.6 and below.

Remediation

Remove the theme from your WordPress installation.

References

Vulnerability Information at wpvulndb.com
Unauthenticated stored XSS vulnerability in WordPress OneTone theme
OneTone Vulnerability Leads to JavaScript Cookie Hijacking

Related Vulnerabilities

Adobe Coldfusion 8 multiple linked XSS vulnerabilies High
Common tags: XSS
WordPress Plugin Elementor Website Builder Cross-Site Scripting (2.9.13) High
Common tags: XSS
WordPress Plugin WordPress Appointment Booking and Online Scheduling by Appointy Cross-Site Scripting (2.40) High
Common tags: XSS
WordPress Plugin WordPress Colorbox Lightbox Cross-Site Scripting (1.1.2) High
Common tags: XSS
WordPress Plugin WordPress fancyBox Lightbox Cross-Site Scripting (1.0.1) High
Common tags: XSS

Severity

High

Classification

CVE-2019-17230
CVE-2019-17231
CWE-79
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Tags

XSS