PUBLISHED
2025-11-06 16:16
MODIFIED
2025-11-06 16:16
EPSS (Prob. Exploit)
0.19%
Top 91.7%
> DESCRIPTION
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Grand Conference Theme Custom Post Type grandconference-custom-post allows Reflected XSS.This issue affects Grand Conference Theme Custom Post Type: from n/a through < 2.6.4.
> AFFECTED_PRODUCTS
ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.
> CWE DETAILED DESCRIPTIONS
CWE-79: Improper Neutralization of Input During Web Page Generation - The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
> HISTORIQUE DES MODIFICATIONS
Première apparition
06/11/2025 16:16
Source: NVD
📊
ENRICHISSEMENT
01/11/2026 06:58
CWE
Champ modifié: Description CWE
Ancienne valeur:
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') - The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in...
Nouvelle valeur:
CWE-79: Improper Neutralization of Input During Web Page Generation - The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a...
📊
ENRICHISSEMENT
19/01/2026 17:36
CVEPROJECT
Champ modifié: CVE Project
📊
ENRICHISSEMENT
01/12/2025 06:01
CWE
Champ modifié: Description CWE
Nouvelle valeur:
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') - The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in...
Total des modifications: 3
Dernière mise à jour: 1 week ago