Skip to content
OpenAdvisories
Medium · 5.1 CVE-2026-87793 EUVD-2026-78666GHSA-m59h-9rxw-9jx5

Reflected XSS in WordPress theme design-scuole-wordpress-theme

Published Sep 15, 2026 · Updated Sep 15, 2026 · Assigned by ENISA

Description

The "Design Scuole Italia" WordPress theme is affected by a Reflected XSS vulnerability in the filters-scheda-didattica.php file,
allowing an unauthenticated attacker to execute arbitrary JavaScript in
a victim's browser via a crafted URL containing a malicious archive parameter.

Affected products

VendorProductAffectedFixed
Developers Italia design-scuole-wordpress-theme 1.0 – ≤ 2.18.2 —

References