Beveiligingsadvies

CVE-2026-89307

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-15 15:23:40

Laatst bijgewerkt 2026-09-15 17:31:45

Toegewezen door ENISA

CVSS-score 5.1

Status PUBLISHED

Beschrijving

The "Firma Circolare" feature in the "Design Scuole Italia" WordPress theme allows an authenticated attacker to inject arbitrary HTML via the sign parameter, enabling forced redirection of visiting users to an attacker-controlled URL (Stored HTML Injection / Open Redirect).

← Alle CVE's bekijken Bekijk op cve.org ↗