8theme XStore WordPress Theme Content Injection Vulnerability

A cross-site scripting (XSS) vulnerability allowing code injection has been identified in the 8theme XStore WordPress theme, affecting versions through 9.5.3. This vulnerability arises from improper neutralization of script-related HTML tags, which could enable a malicious actor to inject content into the website's pages and posts. Such an injection could be exploited to introduce phishing pages or other harmful content.

Impact

Exploitation of this vulnerability could lead to unauthorized content injection on the affected WordPress site, potentially allowing for the introduction of phishing pages or other malicious content.