CyberRota Analysis
AI-GeneratedThe "Firma Circolare" feature in the "Design Scuole Italia" WordPress theme is vulnerable to stored HTML injection, allowing authenticated attackers to inject arbitrary HTML through the sign parameter. This vulnerability can lead to forced redirection of users to malicious URLs, potentially compromising user data and trust. WordPress site administrators using this theme should prioritize patching or mitigating this issue to protect their users from potential phishing attacks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
The "Firma Circolare" feature in the "Design Scuole Italia" WordPress theme allows an authenticated attacker to inject arbitrary HTML via the sign parameter, enabling forced redirection of visiting users to an attacker-controlled URL (Stored HTML Injection / Open Redirect).