Design Comuni Italia WordPress Theme Stored Cross-Site Scripting Vulnerability

A stored cross-site scripting vulnerability has been identified in the Design Comuni Italia WordPress theme, versions prior to 1.1.2. The issue arises because the theme fails to properly sanitize and escape certain parameters before displaying them on the page. This oversight allows unauthenticated users to execute stored cross-site scripting attacks.

Impact

Exploitation of this vulnerability allows for stored cross-site scripting, where injected scripts are executed in the context of the user viewing the page.

Remediation

Users can update to version 1.1.2 or later to address this vulnerability.