CVE:CVE-2022-2654
CNNVD:CNNVD-202209-1217
WordPress是WordPress基金会的一套使用PHP语言开发的博客平台。该平台支持在PHP和MySQL的服务器上架设个人博客网站。WordPress theme是WordPress的一款主题。
WordPress theme Classima 2.1.11之前版本存在跨站脚本漏洞，该漏洞源于在将其输出回属性之前不会转义参数。
solution:Upgrade radiustheme classified_listing_-_classified_ads_&_business_directory to a higher version than 2.2.14,and avoid the version (,2.2.14); Upgrade radiustheme classified_listing_pro_-_classified_ads_&_business_directory to a higher version than 2.0.20,and avoid the version (,2.0.20); Upgrade radiustheme classified_listing_store_&_membership to a higher version than 1.4.20,and avoid the version (,1.4.20); Upgrade radiustheme classima to a higher version than 2.1.11,and avoid the version (,2.1.11); Upgrade radiustheme classima_core to a higher version than 1.10,and avoid the version (,1.10)