Threats tagged 'ghsa-fv85-v87w-8wjv'

A DOM-based Cross-site Scripting (XSS) vulnerability exists in the Kriesi Enfold theme versions up to and including 7.1.3. This flaw involves improper neutralization of input during web page generation, which can lead to execution of malicious scripts in the context of the affected web application. The vulnerability has a CVSS score of 6.5, indicating a medium severity level.