WordPress Nioland Theme Reflected XSS Vulnerability (CVE-2024-10250) Advisory

From this webpage screenshot, the following key vulnerability information can be obtained: 1. Vulnerability Name: Nioland <= 1.2.6 - Reflected Cross-Site Scripting via s 2. CVSS Score: 6.1 (Medium) 3. Public Release Date: October 22, 2024 4. Update Date: October 23, 2024 5. Vulnerability Description: The Nioland theme WordPress plugin is affected by a Reflected Cross-Site Scripting (XSS) vulnerability in all versions (including 1.2.6), due to insufficient input validation and output escaping for the 's' parameter. 6. Fix Status: Fixed 7. Affected Versions: <= 1.2.6 8. Fixed Version: 1.2.7 9. Reference Link: themeforest.net 10. Vulnerability Type: Theme 11. Vulnerability ID: CVE-2024-10250 12. Vulnerability Score: 6.1 (Medium) 13. Public Release Date: October 22, 2024 14. Update Date: October 23, 2024 15. Vulnerability Description: The Nioland theme WordPress plugin is affected by a Reflected Cross-Site Scripting (XSS) vulnerability in all versions (including 1.2.6), due to insufficient input validation and output escaping for the 's' parameter. 16. Fix Status: Fixed 17. Affected Versions: <= 1.2.6 18. Fixed Version: 1.2.7 19. Reference Link: themeforest.net 20. Vulnerability Type: Theme 21. Vulnerability ID: CVE-2024-10250 22. Vulnerability Score: 6.1 (Medium) 23. Public Release Date: October 22, 2024 24. Update Date: October 23, 2024 25. Vulnerability Description: The Nioland theme WordPress plugin is affected by a Reflected Cross-Site Scripting (XSS) vulnerability in all versions (including 1.2.6), due to insufficient input validation and output escaping for the 's' parameter. 26. Fix Status: Fixed 27. Affected Versions: <= 1.2.6 28. Fixed Version: 1.2.7 29. Reference Link: themeforest.net 30. Vulnerability Type: Theme 31. Vulnerability ID: CVE-2024-10250 32. Vulnerability Score: 6.1 (Medium) 33. Public Release Date: October 22, 2024 34. Update Date: October 23, 2024 35. Vulnerability Description: The Nioland theme WordPress plugin is affected by a Reflected Cross-Site Scripting (XSS) vulnerability in all versions (including 1.2.6), due to insufficient input validation and output escaping for the 's' parameter. 36. Fix Status: Fixed 37. Affected Versions: <= 1.2.6 38. Fixed Version: 1.2.7 39. Reference Link: themeforest.net 40. Vulnerability Type: Theme 41. Vulnerability ID: CVE-2024-10250 42. Vulnerability Score: 6.1 (Medium) 43. Public Release Date: October 22, 2024 44. Update Date: October 23, 2024 45. Vulnerability Description: The Nioland theme WordPress plugin is affected by a Reflected Cross-Site Scripting (XSS) vulnerability in all versions (including 1.2.6), due to insufficient input validation and output escaping for the 's' parameter. 46. Fix Status: Fixed 47. Affected Versions: <= 1.2.6 48. Fixed Version: 1.2.7 49. Reference Link: themeforest.net 50. Vulnerability Type: Theme 51. Vulnerability ID: CVE-2024-10250 52. Vulnerability Score: 6.1 (Medium) 53. Public Release Date: October 22, 2024 54. Update Date: October 23, 2024 55. Vulnerability Description: The Nioland theme WordPress plugin is affected by a Reflected Cross-Site Scripting (XSS) vulnerability in all versions (including 1.2.6), due to insufficient input validation and output escaping for the 's' parameter. 56. Fix Status: Fixed 57. Affected Versions: <= 1.2.6 58. Fixed Version: 1.2.7 59. Reference Link: themeforest.net 60. Vulnerability Type: Theme 61. Vulnerability ID: CVE-2024-10250 62. Vulnerability Score: 6.1 (Medium) 63. Public Release Date: October 22, 2024 64. Update Date: October 23, 2024 65. Vulnerability Description: The Nioland theme WordPress plugin is affected by a Reflected Cross-Site Scripting (XSS) vulnerability in all versions (including 1.2.6), due to insufficient input validation and output escaping for the 's' parameter. 66. Fix Status: Fixed 67. Affected Versions: <= 1.2.6 68. Fixed Version: 1.2.7 69. Reference Link: themeforest.net 70. Vulnerability Type: Theme 71. Vulnerability ID: CVE-2024-10250 72. Vulnerability Score: 6.1 (Medium) 73. Public Release Date: October 22, 2024 74. Update Date: October 23, 2024 75. Vulnerability Description: The Nioland theme WordPress plugin is affected by a Reflected Cross-Site Scripting (XSS) vulnerability in all versions (including 1.2.6), due to insufficient input validation and output escaping for the 's' parameter. 76. Fix Status: Fixed 77. Affected Versions: <= 1.2.6 78. Fixed Version: 1.2.7 79. Reference Link: themeforest.net 80. Vulnerability Type: Theme 81. Vulnerability ID: CVE-2024-10250 82. Vulnerability Score: 6.1 (Medium) 83. Public Release Date: October 22, 2024 84. Update Date: October 23, 2024 85. Vulnerability Description: The Nioland theme WordPress plugin is affected by a Reflected Cross-Site Scripting (XSS) vulnerability in all versions (including 1.2.6), due to insufficient input validation and output escaping for the 's' parameter. 86. Fix Status: Fixed 87. Affected Versions: <= 1.2.6 88. Fixed Version: 1.2.7 89. Reference Link: themeforest.net 90. Vulne

Goal Reached Thanks to every supporter — we hit 100%!

WordPress Nioland Theme Reflected XSS Vulnerability (CVE-2024-10250) Advisory