CVE-2019-17231
MEDIUM EXPLOITED NUCLEIMageewp Onetone < 3.0.6 - XSS
Title source: ruleDescription
includes/theme-functions.php in the OneTone theme through 3.0.6 for WordPress has multiple stored XSS issues.
Nuclei Templates (1)
WordPress OneTone theme <= 3.0.6 – Unauthenticated Stored XSS
MEDIUMVERIFIEDby daffainfo
Scores
CVSS v3
6.1
EPSS
0.0014
EPSS Percentile
34.0%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Details
VulnCheck KEV
2020-04-15
CWE
CWE-79
Status
published
Products (1)
mageewp/onetone
< 3.0.6
Published
Apr 03, 2020
Tracked Since
Feb 18, 2026