CVE-2024-2702
High
Description
Missing Authorization vulnerability in Olive Themes Olive One Click Demo Import allows importing settings and data, ultimately leading to XSS.This issue affects Olive One Click Demo Import: from n/a through 1.1.1.
SeverityHigh
CVSS8.2
Exploit probability—
ProductOlivethemes Olive One Click Demo Import
PublishedMar 20, 2024
First seenMar 20, 2024
Weakness typeCWE-862Missing authorization
How to fix
Update
- olivethemes olive_one_click_demo_import1.1.2 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| olivethemes olive_one_click_demo_import | v < 1.1.2 | 1.1.2 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.