CVE-2023-40555

概要

参考情報

• patchstack.com/database/vulnerability/flatsome/wordpress-flatsome-theme-3-17-5-unauthenticated-php-object-injection-vulnerability · Third Party Advisory

flatsome のその他の脆弱性

• CVE-2024-5346中 5.4The Flatsome theme for WordPress is vulnerable to Stored Cross-Site Scripting via the UX Countdown, Video Button, UX Video, UX Slider, UX Si…
• CVE-2023-28994中 6.1Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in UX-themes Flatsome plugin <= 3.16.8 versions.