CVE-2017-20085 LOW

CVE-2017-20085: Atahualpa Theme cross site scriting

Vendor Unspecified

Product Atahualpa Theme

Weakness CWE-80 · XSS · basic

Published June 23, 2022

Last update April 15, 2025

View on NVD All CVEs

CVSS base score

3.5/10

Attack vector Network

Attack complexity Low

Privileges required Low

User interaction Required

Confidentiality None

Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

What the vulnerability does

01Description

A vulnerability has been found in Atahualpa Theme and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to basic cross site scripting. The attack can be launched remotely.

Key dates

02Disclosure timeline

June 23, 2022 CVE published

April 15, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2017-20085 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/80.html

Related vulnerabilities

04Related CVE

CVE-2025-20342 Cisco Integrated Management Controller Virtual Keyboard Video Monitor (vKVM) Stored Cross-Site Scripting Vulnerability CVE-2025-11987 Visual Link Preview <= 2.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via visual-link-preview Shortcode CVE-2023-5582 ZZZCMS Personal Profile Page cross site scripting CVE-2026-44264 Weblate is vulnerable to XSS via crafted Markdown CVE-2023-33197 Craft CMS stored XSS in indexedVolumes