WordPress Nyla Theme Cross-Site Scripting Vulnerability

A cross-site scripting vulnerability has been identified in the WordPress Nyla theme, specifically in versions through 1.7. This issue arises from improper handling of script-related HTML tags, allowing for code injection. Attackers could exploit this vulnerability to inject malicious content, potentially leading to phishing attacks by embedding deceptive pages within the victim's website.

Impact

Exploitation of this vulnerability could result in unauthorized code execution on the affected website, allowing attackers to inject and execute malicious scripts that could be used to compromise the site or its users.