Skip to content
OpenAdvisories

Vendor

Developers Italia

4 known vulnerabilities.

Products

design-scuole-wordpress-theme 4
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.1
    CVE-2026-89307

    HTML injection allows open redirection in WordPress theme design-scuole-wordpress-theme

    The "Firma Circolare" feature in the "Design Scuole Italia" WordPress theme allows an authenticated attacker to inject arbitrary HTML via the sign parameter, enabling forced redirection of visiting users to an attacker-controlled URL (Stored HTML Injection / …

    Developers Italia design-scuole-wordpress-theme Web / CMS
  • Medium 5.1
    CVE-2026-87793

    Reflected XSS in WordPress theme design-scuole-wordpress-theme

    The "Design Scuole Italia" WordPress theme is affected by a Reflected XSS vulnerability in the filters-scheda-didattica.php file, allowing an unauthenticated attacker to execute arbitrary JavaScript in a victim's browser via a crafted URL containing a malicio…

    Developers Italia design-scuole-wordpress-theme Web / CMS