2026-03-13 11:42:22
Patchstack
PUBLISHED
Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) vulnerability in ThemeFusion Avada Core fusion-core allows DOM-Based XSS.This issue affects Avada Core: from n/a through < 5.15.0.