{"id":"CVE-2017-20085","aliases":["EUVD-2017-11092","GHSA-4v26-3qrx-r7mq"],"status":"published","title":"Atahualpa Theme cross site scriting","description":"A vulnerability has been found in Atahualpa Theme and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to basic cross site scripting. The attack can be launched remotely.","severity":{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.00536,"percentile":0.45446,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-79","CWE-80"],"published":"2022-06-23T04:20:23Z","modified":"2026-06-17T01:15:08Z","products":[{"vendor":"bytesforall","product":"atahualpa"},{"vendor":"unspecified","product":"atahualpa theme"}],"references":[{"url":"http://seclists.org/fulldisclosure/2017/Feb/83","tags":["x_refsource_MISC","x_transferred","Exploit","Mailing List","Third Party Advisory"]},{"url":"https://vuldb.com/?id.97375","tags":["x_refsource_MISC","x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-20085"},{"url":"https://github.com/advisories/GHSA-4v26-3qrx-r7mq"}],"sources":{"cve":[{"id":"CVE-2017-20085","title":"Atahualpa Theme cross site scriting","description":"A vulnerability has been found in Atahualpa Theme and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to basic cross site scripting. The attack can be launched remotely.","status":"published","published":"2022-06-23T04:20:23Z","modified":"2025-04-15T14:15:11.688Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N","level":"low","assessor":"cna"}],"cwes":["CWE-80"],"updated_at":"2026-11-02T14:33:11.59359Z"}],"euvd":[{"id":"EUVD-2017-11092","description":"A vulnerability has been found in Atahualpa Theme and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to basic cross site scripting. The attack can be launched remotely.","status":"published","published":"2022-06-23T04:20:23Z","modified":"2025-04-15T14:15:11Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T20:52:29.674488Z"}],"ghsa":[{"id":"GHSA-4v26-3qrx-r7mq","title":"A vulnerability has been found in Atahualpa Theme and classified as problematic. Affected by this...","description":"A vulnerability has been found in Atahualpa Theme and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to basic cross site scripting. The attack can be launched remotely.","status":"published","published":"2022-06-24T00:00:33Z","modified":"2023-01-27T05:04:48Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:42:33.466157Z"}],"nvd":[{"id":"CVE-2017-20085","description":"A vulnerability has been found in Atahualpa Theme and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to basic cross site scripting. The attack can be launched remotely.","status":"published","published":"2022-06-23T05:15:07.037Z","modified":"2026-06-17T01:15:08.687Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N","level":"low","assessor":"secondary"},{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":3.5,"vector":"AV:N/AC:M/Au:S/C:N/I:P/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-80","CWE-79"],"updated_at":"2026-11-02T14:04:21.492973Z"}]}}