Fruitfulcode Vulnerabilities and Affected Products
Explore source-attributed vulnerabilities associated with Fruitfulcode products.
Products
- Fruitful1 vulnerability
- Zoner Real Estate1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2019-25742MEDIUM | WordPress Theme Zoner Real Estate 4.1.1 Persistent XSSWordPress Theme Zoner Real Estate 4.1.1 contains a persistent cross-site scripting vulnerability that allows authenticated agents to inject malicious scripts through the Address input field when creating properties. Attackers can inject JavaScript payloads in the property creation form that execute when administrators view the property for approval, enabling cookie theft and session hijacking. CWE-79Jun 4, 2026 | CVSS5.1v4.0 | EPSS0.171% | PoCs1 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2020-36704MEDIUM | Fruitful < 3.8.2 - Stored Cross-Site ScriptingThe Fruitful Theme for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters stored via the fruitful_theme_options_action AJAX action in versions up to, and including, 3.8.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. CWE-79Jun 7, 2023 | CVSS6.4v3.1 | EPSS0.5% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |