Skip to content
CVE PROGRAM SOURCE RECORD6.1 Medium

CVE-2025-1798

Design Comuni Italia < 1.1.2 - Unauthenticated Stored XSS

Description

The does not sanitise and escape some parameters when outputting them back in a page, allowing unauthenticated users the ability to perform stored Cross-Site Scripting attacks.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown design-comuni-wordpress-theme

Default version status: unaffected

  • 0 to < 1.1.2affected

References