Cththemes

8 CVEs across 7 Cththemes products. Browse Cththemes vulnerabilities, severities, and proof-of-concept exploits.

Cththemes products with known CVEs

ProductCVEs
Citybook4
Easybook4
Townhub4
Balkon1
Monolit1
Outdoor1
Theroof1
Cththemes CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2023-36502High7.12023-07-25Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cththemes Balkon plugin <= 1.3.2 versions.
CVE-2023-29430High7.12023-06-26Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in CTHthemes TheRoof theme <= 1.0.3 versions.
CVE-2023-29236High7.12023-04-07Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Cththemes Outdoor theme <= 3.9.6 versions.
CVE-2023-25041High7.12023-04-07Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Cththemes Monolit theme <= 2.0.6 versions.
CVE-2019-20212Medium6.12020-01-13The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes for WordPress allow Persistent XSS via the chat widget/page message…
CVE-2019-20211Medium6.12020-01-13The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes for WordPress allow Persistent XSS via Listing Address, Listing Lat…
CVE-2019-20210Medium6.12020-01-13The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes for WordPress allow Reflected XSS via a search query.
CVE-2019-20209High7.52020-01-13The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes for WordPress allow nsecure Direct Object Reference (IDOR) via wp-a…