CVE-2023-4826
MEDIUM
6.1
CVSS 3.1
Description
The SocialDriver WordPress theme before version 2024 has a prototype pollution vulnerability that could allow an attacker to inject arbitrary properties resulting in a cross-site scripting (XSS) attack.
Affected products and versions
- Unknown socialdriver — Before 2024
- socialdriver socialdriver — Before 2024
References
- socialdriver.com http://socialdriver.com Product
- wpscan.com https://wpscan.com/vulnerability/99ec0add-8f4d-4d68-91aa-80b1631a53bf/ Third Party Advisory
- nvd.nist.gov Official NVD record