Cross-Site Scripting Vulnerability in TheCartPress Boot Store Theme by WordPress
CVE-2015-4582

6.1MEDIUM

Key Information:

Vendor

WordPress
Status
Boot-store
Vendor
CVE Published:
28 April 2025

What is CVE-2015-4582?

The TheCartPress Boot Store theme version 1.6.4 for WordPress contains a vulnerability that allows attackers to exploit the 'header.php' file via Cross-Site Scripting (XSS). This flaw enables unauthorized scripts to be executed in the context of users interacting with the affected site, potentially leading to data theft or account compromise.

Affected Version(s)

boot-store 1.6.4

References

https://themes.trac.wordpress.org/browser/boot-store/1.6....

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2015-4582 : Cross-Site Scripting Vulnerability in TheCartPress Boot Store Theme by WordPress