← Back

Workscout Core

workscout_core

Vendor: Purethemes • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Purethemes
2Workscout
Workscout Core
Nov 21, 2024
May 6, 2021
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
The Workscout Core WordPress plugin before 1.3.4, used by the WorkScout Theme did not sanitise the chat messages sent via the workscout_send_message_chat AJAX action, leading to Stored Cross-Site Scripting and Cross-Fram...Show more
The Workscout Core WordPress plugin before 1.3.4, used by the WorkScout Theme did not sanitise the chat messages sent via the workscout_send_message_chat AJAX action, leading to Stored Cross-Site Scripting and Cross-Frame Scripting issuesShow less