漏洞描述
WordPress Mediumish theme 1.0.47 and prior contains an unauthenticated reflected cross-site scripting vulnerability. The 's' GET parameter is not properly sanitized by the search feature before it is output back on the page.
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
wpscan.comhttps://wpscan.com/vulnerability/57e27de4-58f5-46aa-9b59-809705733b2e↗m0ze.ruhttps://m0ze.ru/vulnerability/%5B2021-03-14%5D-%5BWordPress%5D-%5BCWE-79%5D-Mediumish-WordPress-Theme-v1.0.47.txt↗www.wowthemes.nethttps://www.wowthemes.net/themes/mediumish-wordpress/↗nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2021-24316↗